b8dbcdc3074044082912074e7b1f25ad

General

Target

b8dbcdc3074044082912074e7b1f25ad
Size

56KB
MD5

b8dbcdc3074044082912074e7b1f25ad
SHA1

92c44455dee36a1fe85a9b628e5c3331b595ab1e
SHA256

d49f78e160cf50a3942b8bf7f3dce868b64cde0dc9c0e16d6eb54c6368965c0a
SHA512

7acb35772df7ad36ddbbefe90945cdf25512303891622a59a8e6b26fa4320f4947230afc9b51b7583d755c4ff4f31ee6b398de78e11ebbb7802215d61429cbc5
SSDEEP

768:/FRAw0SmaQKNHTcrzikbvbNf6bjqkEteIpKlnb+XtD:Nw7xKBUukbjNiUteSHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8dbcdc3074044082912074e7b1f25ad

Files

b8dbcdc3074044082912074e7b1f25ad
.exe windows:4 windows x86 arch:x86

e1f326201a26d0db599856f447250c40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
FindResourceA
LoadResource
GetProcessHeap
HeapAlloc
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
MultiByteToWideChar
HeapSize
GetCommandLineA
HeapFree
GetVersionExA
GetStartupInfoA
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind

user32

GetDC
IsZoomed
ReleaseDC
DefWindowProcA
RegisterClassA
CreateWindowExA
GetWindowLongA
GetCaretBlinkTime

gdi32

GetTextAlign
SetColorSpace
GetColorSpace
ChoosePixelFormat
SetPixelFormat
GetTextColor
CreatePen

opengl32

wglGetProcAddress
wglCreateContext
wglShareLists
wglMakeCurrent
glLightiv
glGetLightiv

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1f326201a26d0db599856f447250c40

Headers

File Characteristics

Imports

kernel32

user32

gdi32

opengl32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 12KB - Virtual size: 11KB