e8c0f61e914eb0bcb2861223ae08a6efcb65b92faffaa044dcd5f5418ae6a31c

Sharing

Copy URL

Twitter E-mail

General

Target

e8c0f61e914eb0bcb2861223ae08a6efcb65b92faffaa044dcd5f5418ae6a31c
Size

2.9MB
MD5

e1d04e1aaf7ace7305c5b7496d0d54d1
SHA1

05922eae8da087dc48b38fa9fc05caf8a70f7f86
SHA256

e8c0f61e914eb0bcb2861223ae08a6efcb65b92faffaa044dcd5f5418ae6a31c
SHA512

92ff87bc78d0d498a5eff65936c91b6f7f1aaf508848f5081137f4db06b197aa562ead7677920b956f6ec7b3d9cf39839a15547b6cc5292f3ec15961bb8ec73a
SSDEEP

49152:b/UYhXo+qKzMqGIbVgv6VkWcxhHUqqCRlaZ/W4Nbq0mDxCxBTf7cvF2sM5:b/HXooGIbV6fWTRCmZ/W4JGDCBTfIvFK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8c0f61e914eb0bcb2861223ae08a6efcb65b92faffaa044dcd5f5418ae6a31c

Files

e8c0f61e914eb0bcb2861223ae08a6efcb65b92faffaa044dcd5f5418ae6a31c
.dll windows:5 windows x86 arch:x86

93665cf8b850370cac9110532c73bde8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

GetErrorInfo

msacm32

acmFormatSuggest

gdi32

GetSystemPaletteEntries
CreateBrushIndirect
GetTextColor
GetPolyFillMode

kernel32

IsDebuggerPresent
OutputDebugStringA
LoadLibraryExA
CloseHandle
GetModuleHandleA
GetProcAddress
CreateToolhelp32Snapshot
TerminateJobObject
GetCommandLineW
IsValidCodePage
DeleteTimerQueueEx
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
RtlUnwind

setupapi

CM_Get_Device_ID_Size

mprapi

MprAdminInterfaceCreate
MprAdminTransportSetInfo

shell32

SHFormatDrive
ShellAboutW

advapi32

QueryServiceObjectSecurity
CloseServiceHandle

user32

OpenIcon
IsZoomed
SetProcessWindowStation
MonitorFromWindow
CloseWindowStation
ShowWindow

wintrust

CryptCATCDFEnumCatAttributes
CryptCATEnumerateMember
CryptCATCatalogInfoFromContext

ole32

OleDestroyMenuDescriptor

Exports

Exports

BoenzieelioarhhhI

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93665cf8b850370cac9110532c73bde8

Headers

File Characteristics

Imports

oleaut32

msacm32

gdi32

kernel32

setupapi

mprapi

shell32

advapi32

user32

wintrust

ole32

Exports

Exports

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 1.0MB - Virtual size: 1.0MB

.CRT Size: 4KB - Virtual size: 4B

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 104KB - Virtual size: 100KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 1.0MB - Virtual size: 1.0MB

.CRT
Size: 4KB - Virtual size: 4B

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 104KB - Virtual size: 100KB