b8caf5e766d3badf099ce2ea64f09f08

General

Target

b8caf5e766d3badf099ce2ea64f09f08
Size

96KB
MD5

b8caf5e766d3badf099ce2ea64f09f08
SHA1

0bea25a9ae598b9578180c64c9e925705e9beb2c
SHA256

8d3158bcdfc4a4f90e7cf842a9168fcc2ea002086e43409fc79fd38b30a3d805
SHA512

1370e0e37aeb9cb3345bb34d9a077b35ffe14e434540467c406a22a8b04e8a122249abc76e2764406139ce3fe75c610ff8cb2767387cd6753fd3746fac198e5d
SSDEEP

1536:c+M8el/K2PafAicPwTmJsmw/MMdb3T9ztFmDlNHsl:c+M8SKFYxwjZb3BztFmxNMl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8caf5e766d3badf099ce2ea64f09f08

Files

b8caf5e766d3badf099ce2ea64f09f08
.dll windows:4 windows x86 arch:x86

40bb29c593fd7f33aa60c9a673cfb452

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OpenFileMappingA
CreateFileMappingA
MapViewOfFile
CloseHandle
UnmapViewOfFile
GetCurrentProcessId
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
Sleep
HeapSize
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40bb29c593fd7f33aa60c9a673cfb452

Headers

File Characteristics

Imports

kernel32

ole32

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 176B

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 176B

.reloc
Size: 8KB - Virtual size: 5KB