80905a20f0716702babe3478449ffdac38ee294978611883996e5502f44ddeda

General

Target

80905a20f0716702babe3478449ffdac38ee294978611883996e5502f44ddeda
Size

3.5MB
MD5

4af0691358d477ad3d5b1680ca18fdd4
SHA1

a6d68053a83123689d44f6454269b564491f7488
SHA256

80905a20f0716702babe3478449ffdac38ee294978611883996e5502f44ddeda
SHA512

ccb4ec82f189ebe0fd11061f29eec1045612d5f896d01fc945de79b60a03964f12f15bb683fc9615c56076ec3cc4bf2a8355fb1e385793aedb14c8a89698c583
SSDEEP

98304:JKGViKCmbqONZ4lwmePorE03xPp1LHd4zb:0x2eqm3T94z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80905a20f0716702babe3478449ffdac38ee294978611883996e5502f44ddeda

Files

80905a20f0716702babe3478449ffdac38ee294978611883996e5502f44ddeda
.dll windows:5 windows x86 arch:x86

7dfb9a326f957a2e2f1dbba210f9084d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharUpperBuffA
UpdateWindow

kernel32

GetSystemTimeAsFileTime
GetModuleFileNameW
GetBinaryTypeW
GetModuleFileNameA
LoadLibraryExW
OutputDebugStringA
CreateFileA
MultiByteToWideChar
GetLastError
ReadFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
DeleteCriticalSection
HeapFree
SetFilePointer
Sleep
SetStdHandle
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
ExitProcess
RtlUnwind
InitializeCriticalSectionAndSpinCount
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
LoadLibraryA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

oleaut32

SysAllocStringLen

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 812KB - Virtual size: 811KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 688KB - Virtual size: 695KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 232KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7dfb9a326f957a2e2f1dbba210f9084d

Headers

File Characteristics

Imports

user32

kernel32

oleaut32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 812KB - Virtual size: 811KB

.data Size: 688KB - Virtual size: 695KB

.rsrc Size: 4KB - Virtual size: 840B

.reloc Size: 232KB - Virtual size: 229KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 812KB - Virtual size: 811KB

.data
Size: 688KB - Virtual size: 695KB

.rsrc
Size: 4KB - Virtual size: 840B

.reloc
Size: 232KB - Virtual size: 229KB