8f3f3a74e43330bbb87dbc520976e5cf67e68ae86d77f50fce6f232cc8888a40

Sharing

Copy URL

Twitter E-mail

General

Target

8f3f3a74e43330bbb87dbc520976e5cf67e68ae86d77f50fce6f232cc8888a40
Size

100KB
MD5

2c452b727931f8ee603150abf8e40d51
SHA1

cadc9d60cf35fdc13a4d86517fb68caf0c3ed928
SHA256

8f3f3a74e43330bbb87dbc520976e5cf67e68ae86d77f50fce6f232cc8888a40
SHA512

36f253f09320c691745b85636653c9f85a79ae7ba9ff2c77606694b80632cbbc79684e1e197fa1b30bd1a7773ffec9530d5ad44de6c10f6e749d511d354303ec
SSDEEP

768:2hf8CmtZTkh6jVFnR9x+fbFgTxiJbiCSRqb/BxRrFCB+Ux2PrUWGq593kOjHOE9Q:aokAh2gT4JfSEH0+g2jcOjV8HlvXr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f3f3a74e43330bbb87dbc520976e5cf67e68ae86d77f50fce6f232cc8888a40

Files

8f3f3a74e43330bbb87dbc520976e5cf67e68ae86d77f50fce6f232cc8888a40
.dll windows:4 windows x86 arch:x86

6c8995547e7b98e1f0396056b061bd47

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
HeapFree
HeapAlloc
GetProcessHeap
Process32Next
OpenProcess
Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
CreateEventA
GetModuleFileNameA
ExitProcess
GetCurrentProcess
InterlockedExchange
FlushFileBuffers
ExpandEnvironmentStringsA
GetLastError
WriteFile
CreateFileA
GetFileSize
CreatePipe
GetStartupInfoA
CreateProcessA
CloseHandle
PeekNamedPipe
Sleep
ReadFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
InterlockedIncrement
RtlUnwind
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
TerminateProcess
HeapReAlloc
HeapSize
TlsAlloc
TlsFree
SetLastError
UnhandledExceptionFilter
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
InterlockedDecrement
RaiseException

user32

PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA

gdi32

GetStockObject

advapi32

EqualSid
ConvertSidToStringSidA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetTokenInformation

wininet

InternetSetOptionA
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetCrackUrlA
InternetSetCookieA

iphlpapi

GetAdaptersInfo

Exports

Exports

Start

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c8995547e7b98e1f0396056b061bd47

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

wininet

iphlpapi

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 16KB - Virtual size: 22KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 16KB - Virtual size: 22KB

.reloc
Size: 8KB - Virtual size: 6KB