b8a270afd8f44d5f735df74f28987da4

Sharing

Copy URL Twitter E-mail

General

Target

b8a270afd8f44d5f735df74f28987da4
Size

205KB
MD5

b8a270afd8f44d5f735df74f28987da4
SHA1

f273289c4e26311d55f20f03a5d0eab0b6851365
SHA256

9e33d1dd339fee56fe4a0b7824f4376bce18c74f44041b2f3b8ae5b96a99dcc7
SHA512

d94a365d4dde64f1612199dee53dcaa345133b37316edeb1c46ac58a5f13c05ff4f4cf91aa4866b7ee4e94ce024767406911cc75d14250aefa38da931dcf6147
SSDEEP

3072:C4QY3golZ0Ou+fAhvc3jTvxj2pt8jfpZYRQ/rpusNaNU:CIbwzhvcvVGt8jfkQ/ro

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8a270afd8f44d5f735df74f28987da4

Files

b8a270afd8f44d5f735df74f28987da4
.exe windows:4 windows x86 arch:x86

b63944e33eb95314d1fbd0fdaed6a71f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapCreate
HeapDestroy
GetProcessHeap
HeapReAlloc
HeapSize
HeapFree
CreateMutexA
ReleaseMutex
OpenMutexA
FindResourceA
FindResourceW
LoadResource
SizeofResource
LockResource
FreeResource
GetSystemTime
MultiByteToWideChar
CreateFileW
ReadFile
WriteFile
GetFileSize
SetEndOfFile
CloseHandle
GetDriveTypeA
CreateFileA
UnmapViewOfFile
MapViewOfFile
CreateEventA
SetEvent
ResetEvent
lstrcmpiA
DuplicateHandle
GetLocalTime
CreateThread
GetCurrentThreadId
ResumeThread
SetThreadPriority
GetExitCodeThread
ExitThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LCMapStringA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
GetCommandLineA
GetEnvironmentVariableA
VirtualFree
GetCurrentThread
FileTimeToDosDateTime
LocalFree
GetExitCodeProcess
GetModuleHandleA
GetLocaleInfoW
WaitForMultipleObjects
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryA
LoadLibraryW
GetProcAddress
FindFirstFileW
FindNextFileW
FindClose
FindFirstFileA
FindNextFileA
LoadLibraryExA
TerminateThread
GetUserDefaultLangID
lstrcpynA
lstrcpyA
GetLocaleInfoA
GetStringTypeW
SetThreadLocale
FileTimeToSystemTime
GlobalHandle
WaitForSingleObject
IsDBCSLeadByte
GetCurrentDirectoryA
GetModuleHandleW
GetFileType
IsBadReadPtr
GetACP
GetSystemTimeAsFileTime
lstrcmpA
CreateEventW
CreateProcessA
IsBadWritePtr
GetStartupInfoA
GetEnvironmentStringsW
IsValidCodePage
LocalFileTimeToFileTime
EnumCalendarInfoA
GetVersionExA
GetUserDefaultLCID
FileTimeToLocalFileTime
GetEnvironmentStrings
ExitProcess
GetThreadLocale
GlobalUnlock
GetFileTime
GetCommandLineW
LoadLibraryExW
GetModuleFileNameA
DeviceIoControl
lstrlenW
WideCharToMultiByte
FormatMessageA
IsBadCodePtr
SetStdHandle
SetErrorMode
InterlockedIncrement
Sleep
GetTimeZoneInformation
GetSystemInfo
GetPrivateProfileStringA
TerminateProcess
GetTickCount
UnhandledExceptionFilter
SetHandleCount
VirtualAlloc

msvcrt

_fdopen
fgets
strstr
getenv
_isatty
toupper
fclose
_get_osfhandle
_onexit
_wcsicmp
_cexit
_ismbblead
strcat
_wtoi
ctime
isdigit
_pctype
setlocale
_CIpow
wcslen
_c_exit
__set_app_type
fseek
_filelengthi64
iswspace
fprintf
_stricmp
perror
wcscat
__setusermatherr
_wtol
fputs
__badioinfo
memcpy
_wcslwr
srand
_snprintf
_amsg_exit
_fileno
_putenv
strcspn
_mkdir
_CIsqrt
strlen
wcsncmp
_isctype
_strlwr
longjmp
tolower
strerror
rewind
memset
fputc
realloc
_fullpath
_dup
atoi
wcschr
_getpid
_vsnprintf
__p__fmode
printf
__p___initenv
isleadbyte
_strdup
_setjmp
strncpy
_ultoa
strcpy
log
wcscmp
strtol
signal
_osver
_assert
_wfopen
calloc
_iob
wctomb
_dup2
time
gmtime
strtok
fread
remove
sprintf
_itoa
abort
memchr
ceil
_controlfp
wcstoul
free
bsearch
_getcwd
strpbrk
localtime
_utime
strncmp
strncat
qsort
atol
isspace
fflush
iswdigit
__CxxFrameHandler
_errno
_adjust_fdiv
ungetc
__dllonexit
_filbuf
_write
__lc_codepage
__p__environ
fgetc
_stat
isxdigit
_mbscmp
fgetpos
_kbhit
malloc
_mktemp
_strcmpi
swscanf
vsprintf
strspn
_flsbuf
_chmod
puts
ftell
_open
towupper
_mbsicmp
_initterm
_umask
rand
_mbsrchr
_ftol
_vsnwprintf
_unlink
_except_handler3
clearerr
strchr
_acmdln
_wcsnicmp
_setmode
_read
exit
wcsncpy
memmove
iswctype
cos
putchar
__pioinfo
wcstol
_unlock
wcstombs
_XcptFilter
sscanf
sin
memcmp
_close
__initenv
floor
_fstat
_lseeki64
_lseek
_getch
_exit
wcsstr
sqrt
fsetpos
_strnicmp
towlower
__getmainargs
clock
__mb_cur_max
strcmp
pow
atexit
localeconv
_beginthreadex
_open_osfhandle
strrchr
__p__commode
fwrite
wcscspn
strtoul
_purecall
wcsrchr
rename
_snwprintf
_itow
_pipe
_wcsupr
atof
swprintf

user32

PeekMessageA
IsChild
MapWindowPoints
GetCursorPos
EnableWindow
WindowFromPoint
GetSysColor
GetDC
GetScrollInfo
GetSystemMetrics
SetWindowPlacement
CharNextA
InvalidateRect
GetActiveWindow
CallNextHookEx
GetPropA
DrawTextA
GetScrollRange
RegisterClipboardFormatA
CreateWindowExA
ShowOwnedPopups
SetMenu
SetScrollPos
SendMessageA
GetKeyboardType
OpenClipboard
GetWindowThreadProcessId
CheckMenuItem
GetScrollPos
InsertMenuA
PtInRect
GetClientRect
CharLowerA
SetWindowsHookExA
OffsetRect
GetDlgItem
BeginPaint
ReleaseDC
GetWindowDC
wsprintfA
DeleteMenu
EnumThreadWindows
EnumWindows
UnregisterClassA
EmptyClipboard
SetCursor
IsWindowVisible
GetSysColorBrush
ShowWindow
GetFocus
InflateRect
AdjustWindowRectEx
IsIconic
PostQuitMessage
DrawIconEx
GetMessagePos
DestroyWindow
GetSubMenu
EndDialog
GetMenuState
DispatchMessageA
GetWindow
GetMenuStringA
WinHelpA
RedrawWindow
DrawEdge
GetClassNameA
GetDCEx
SystemParametersInfoA
CloseClipboard
DestroyMenu
IntersectRect
GetMessageA
ScreenToClient
DrawMenuBar
ReleaseCapture
DestroyCursor
GetMenuItemID
IsWindow
UnhookWindowsHookEx
InsertMenuItemA
ClientToScreen
SetWindowPos
TrackPopupMenu
RegisterClassA
FindWindowA
SetActiveWindow
FillRect
EndPaint
RemoveMenu
TranslateMessage
GetTopWindow
GetMenu
GetDesktopWindow
CreateMenu
GetLastActivePopup
IsZoomed
SetWindowLongA
LoadBitmapA
DefWindowProcA
SetPropA
SetClassLongA
IsRectEmpty
CallWindowProcA
RegisterWindowMessageA
KillTimer
SetScrollInfo
ShowCursor
GetCapture
GetClassInfoA
GetMenuItemCount
PostMessageA
OemToCharA
MessageBeep
ScrollWindow
MessageBoxA
LoadStringA
DrawIcon
GetParent
GetSystemMenu
FrameRect
EnableMenuItem
DialogBoxParamA
WaitMessage
SendDlgItemMessageA
EqualRect
GetWindowLongA
SetFocus
GetWindowPlacement
SetScrollRange
GetIconInfo
SetForegroundWindow
GetKeyState
GetWindowTextA
DestroyIcon
SetWindowTextA
SetClipboardData
CreatePopupMenu
SetCapture
DrawFrameControl

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 58KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b63944e33eb95314d1fbd0fdaed6a71f

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 79KB - Virtual size: 79KB

.rsrc Size: 1KB - Virtual size: 4KB

Size: 58KB - Virtual size: 95KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 79KB - Virtual size: 79KB

.rsrc
Size: 1KB - Virtual size: 4KB