c8806a8f617c91a960453e874fe8ad98

Sharing

Copy URL Twitter E-mail

General

Target

c8806a8f617c91a960453e874fe8ad98
Size

258KB
MD5

c8806a8f617c91a960453e874fe8ad98
SHA1

1fa68198eb3fcdb2a200ec581fde4fde5ffa1744
SHA256

adc62f1355bc324639b43eb3e04c5a02298156befa3e5f75ca99cd249f77bc6e
SHA512

ee4d7276a14441bc33d9db1c22902fdf990ac4433ce0ae800397bb2e544ca6f34272b5c00fb79655f1d2add6a5b80811a9d4e913090fc1b8d3a44ca3adcf9f4a
SSDEEP

6144:bYHdq0nY6nRFRhR/W5ATVpKRRgzLUuZbeOE5Vr3:bYHdq0nY6vRhR/WyTVpKozLU25Efr3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8806a8f617c91a960453e874fe8ad98

Files

c8806a8f617c91a960453e874fe8ad98
.exe windows:4 windows x86 arch:x86

c6a119d72213992b8929fceed04291fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
SetFilePointer
LoadLibraryExA
LocalAlloc
WriteFile
WideCharToMultiByte
SetEndOfFile
SetThreadLocale
SetHandleCount
VirtualAllocEx
LocalFree
ResetEvent
LoadLibraryA
GetVersionExA
GetLastError
MoveFileA
GetCommandLineW
lstrcpyA
VirtualQuery
lstrcatA
LocalReAlloc
IsBadHugeReadPtr
GlobalAlloc
HeapDestroy
GetCommandLineA
ExitProcess
MoveFileExA
GetModuleHandleA
GetProcAddress
MulDiv
lstrlenW
SetEvent
lstrcpynA
IsBadReadPtr
lstrcmpA

user32

GetMenuState
InsertMenuItemA
InvalidateRect
IsWindow
GetSystemMenu
GetKeyboardLayoutNameA
GetLastActivePopup
GetClipboardData
GetMenu
GetKeyboardLayoutList
GetDC
InflateRect
GetParent
GetWindowRect
GetScrollPos
GetCursorPos
IsDialogMessageW
GetPropA
GetDCEx
GetSysColor
GetMessagePos
GetTopWindow

gdi32

BitBlt
CreateBitmap
CopyEnhMetaFileA

Sections

CODE
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES72
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES78
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES54
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES91
Size: 1024B - Virtual size: 967B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES28
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES25
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES23
Size: 1024B - Virtual size: 675B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES71
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c6a119d72213992b8929fceed04291fe

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

CODE Size: 81KB - Virtual size: 81KB

.data Size: 159KB - Virtual size: 159KB

.RES72 Size: 2KB - Virtual size: 1KB

.RES78 Size: 2KB - Virtual size: 2KB

.RES54 Size: 1KB - Virtual size: 1KB

.RES91 Size: 1024B - Virtual size: 967B

.RES28 Size: 2KB - Virtual size: 1KB

.RES25 Size: 2KB - Virtual size: 1KB

.RES23 Size: 1024B - Virtual size: 675B

.RES71 Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

CODE
Size: 81KB - Virtual size: 81KB

.data
Size: 159KB - Virtual size: 159KB

.RES72
Size: 2KB - Virtual size: 1KB

.RES78
Size: 2KB - Virtual size: 2KB

.RES54
Size: 1KB - Virtual size: 1KB

.RES91
Size: 1024B - Virtual size: 967B

.RES28
Size: 2KB - Virtual size: 1KB

.RES25
Size: 2KB - Virtual size: 1KB

.RES23
Size: 1024B - Virtual size: 675B

.RES71
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB