8fe497ee4373376e561ba3a77e81d6c0

Sharing

Copy URL Twitter E-mail

General

Target

8fe497ee4373376e561ba3a77e81d6c0
Size

608KB
MD5

8fe497ee4373376e561ba3a77e81d6c0
SHA1

d7921d44b9b556886cf35eb971cae00dcd6cf2e9
SHA256

74c48f1e60e5fd84ae5d4fa19b9b363932f3308ef1cc786699ff0280ea23e2af
SHA512

6f4338e6760973bfa1596c587cf7efa5ec6f9a17d9332e68ab6f4cb378b156161bdd71aece4b9ab48965a8c98fbd54ef4cedf85819ea88d5944964381642a061
SSDEEP

12288:cgCKiSsirycdgO030RjXJeAz58HZRk8xsrwB7BDUmXV77i:NCKzsirrdj0kVZQRegUmN7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fe497ee4373376e561ba3a77e81d6c0

Files

8fe497ee4373376e561ba3a77e81d6c0
.exe windows:4 windows x86 arch:x86

377229719a43fb1259b8c0add948c728

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\ygzufczgrg.pdb

Imports

kernel32

GetCurrentThreadId
GetStartupInfoA
FreeEnvironmentStringsW
EnumSystemLocalesA
SetCriticalSectionSpinCount
GetCurrentThread
GetACP
TerminateProcess
GetEnvironmentStrings
GetSystemInfo
CreateFileMappingA
GetLocaleInfoW
GetCPInfo
SetLastError
GetModuleHandleA
GetLastError
CompareStringA
GetSystemTimeAsFileTime
ReadFile
SetEnvironmentVariableA
GetTimeFormatA
GetModuleFileNameA
VirtualAlloc
VirtualQuery
CompareStringW
InitializeCriticalSection
FlushFileBuffers
TlsSetValue
SetFilePointer
LocalAlloc
GetStartupInfoW
ExitProcess
GetCurrentProcess
CloseHandle
LoadLibraryA
GetCurrentProcessId
SetHandleCount
GetUserDefaultLCID
IsBadWritePtr
RtlUnwind
HeapDestroy
GetModuleFileNameW
VirtualFree
WriteFile
LocalLock
GetTimeZoneInformation
LeaveCriticalSection
HeapFree
IsValidLocale
DeleteCriticalSection
InterlockedExchange
GetCommandLineW
QueryPerformanceCounter
GetStdHandle
GetStringTypeA
LCMapStringA
GetCommandLineA
HeapSize
CreateMutexA
GetEnvironmentStringsW
GetFileType
GetProcAddress
EnterCriticalSection
TlsGetValue
GetVersionExA
HeapAlloc
GetLocaleInfoA
GetOEMCP
GetDateFormatA
SetStdHandle
GetTickCount
VirtualProtect
OpenMutexA
LCMapStringW
IsValidCodePage
HeapCreate
TlsAlloc
HeapReAlloc
TlsFree
MultiByteToWideChar
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetStringTypeW
WideCharToMultiByte

user32

CopyRect
SystemParametersInfoA
DdePostAdvise
GetClassLongA
RegisterDeviceNotificationW
GetWindow
DdeGetLastError
RegisterClassExA
CloseClipboard
DestroyWindow
CreateWindowExW
DdeClientTransaction
SendIMEMessageExW
DrawAnimatedRects
ShowWindow
WaitForInputIdle
DefWindowProcA
SetMenuContextHelpId
MessageBoxA
ChangeMenuA
RegisterClassA
PostThreadMessageA

comctl32

ImageList_GetFlags
InitMUILanguage
ImageList_Replace
_TrackMouseEvent
InitCommonControlsEx

Sections

.text
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

377229719a43fb1259b8c0add948c728

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

comctl32

Sections

.text Size: 192KB - Virtual size: 188KB

.rdata Size: 252KB - Virtual size: 249KB

.data Size: 112KB - Virtual size: 123KB

.rsrc Size: 48KB - Virtual size: 45KB

.text
Size: 192KB - Virtual size: 188KB

.rdata
Size: 252KB - Virtual size: 249KB

.data
Size: 112KB - Virtual size: 123KB

.rsrc
Size: 48KB - Virtual size: 45KB