f8b86c3b0c42fe99f3aa0a22f4b1f33bc8d7f25f243f5c823652a22f13aacf8a

Sharing

Copy URL Twitter E-mail

General

Target

f8b86c3b0c42fe99f3aa0a22f4b1f33bc8d7f25f243f5c823652a22f13aacf8a
Size

6.0MB
MD5

41d4575986d50a5b4b72525bea471d19
SHA1

b9ff3e714fed70ebf15bf3d2e36f3537a0db11a6
SHA256

f8b86c3b0c42fe99f3aa0a22f4b1f33bc8d7f25f243f5c823652a22f13aacf8a
SHA512

97163c60d934d6d6142f178dea57f4aa3f882ecfbaaa2043ab497109d55e594b4e0738eb6b5284f6577de0dbc924e78de81c89f5ca91808dc767a3e4ce6d05b6
SSDEEP

98304:qbKejf61bXU59w9ohFTQdEeS7v+URoG0+C+0LIQ4n04NyH13NZWAUU:q+e+xU59UohFk5EW0oGHCli04NyT8L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8b86c3b0c42fe99f3aa0a22f4b1f33bc8d7f25f243f5c823652a22f13aacf8a

Files

f8b86c3b0c42fe99f3aa0a22f4b1f33bc8d7f25f243f5c823652a22f13aacf8a
.exe windows:5 windows x86 arch:x86

908bd8d950d38cd8339bbadc39175851

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcsstr

advapi32

RegQueryInfoKeyA

kernel32

GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

gdi32

LineTo

user32

SetFocus
CharUpperBuffW

ole32

CoTaskMemAlloc

oleaut32

SysAllocString

Sections

.text
Size: - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.|6<
Size: - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.htext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BGG
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.q$z
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RxX
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

908bd8d950d38cd8339bbadc39175851

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

gdi32

user32

ole32

oleaut32

Sections

.text Size: - Virtual size: 193KB

.data Size: - Virtual size: 3KB

.|6< Size: - Virtual size: 54KB

.htext Size: - Virtual size: 4KB

.BGG Size: - Virtual size: 3.4MB

.q$z Size: 2KB - Virtual size: 2KB

.RxX Size: 6.0MB - Virtual size: 6.0MB

.rsrc Size: 34KB - Virtual size: 34KB

.text
Size: - Virtual size: 193KB

.data
Size: - Virtual size: 3KB

.|6<
Size: - Virtual size: 54KB

.htext
Size: - Virtual size: 4KB

.BGG
Size: - Virtual size: 3.4MB

.q$z
Size: 2KB - Virtual size: 2KB

.RxX
Size: 6.0MB - Virtual size: 6.0MB

.rsrc
Size: 34KB - Virtual size: 34KB