8fadf64901309fa7295b7c4ada877450

Sharing

Copy URL Twitter E-mail

General

Target

8fadf64901309fa7295b7c4ada877450
Size

17KB
MD5

8fadf64901309fa7295b7c4ada877450
SHA1

9fdfccec0a647af7189374c9171739eff3b0cc2b
SHA256

d78e1f9f4ebd1aedea01354c81c4968197f6068f507bf66c2f3f5425dad3bc34
SHA512

04d4bdfbc96d2890a603cf9eb8d281ed1e837253d1f5606b3bb2ba08c23a07188f7ee647553c9eda21c987d28971b045032c89810cdd1edf5c0d058985e3c891
SSDEEP

384:WdKj/S1jgx4whjxtgkNW69TjhU81Y1SsW6mV2:W0j/kjgx4whjxVNlhUcoPf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fadf64901309fa7295b7c4ada877450

Files

8fadf64901309fa7295b7c4ada877450
.exe windows:4 windows x86 arch:x86

78e13658dec7125bb048ee859ccdb2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Documents and Settings\Administrator\My Documents\Programming\Visual2005\WindowSystemProgramming\release\Autorun_2.pdb

Imports

wininet

HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW

kernel32

GetTickCount
GetModuleFileNameW
GetWindowsDirectoryW
SetEnvironmentVariableW
ExitProcess
CreateMutexW
GetLastError
CloseHandle
CopyFileW
CreateProcessW
WaitForSingleObject
FindResourceW
SizeofResource
LoadResource
LockResource
GetCurrentThreadId
SetFilePointer
WriteFile
SetFileAttributesW
Sleep
GetComputerNameW
DuplicateHandle
GetCurrentProcess
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileW

user32

DefWindowProcW
PostQuitMessage
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
DispatchMessageW
TranslateMessage
GetMessageW
RegisterDeviceNotificationW

advapi32

RegSetValueExW
RegNotifyChangeKeyValue
RegOpenKeyExW

msvcr80

_invoke_watson
_controlfp_s
_swprintf
_except_handler4_common
??2@YAPAXI@Z
memset
_wcsicmp
_wfopen
fputws
fclose
_beginthreadex
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78e13658dec7125bb048ee859ccdb2bd

Headers

File Characteristics

PDB Paths

Imports

wininet

kernel32

user32

advapi32

msvcr80

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 7KB - Virtual size: 6KB