8c79ef97ac9c2e0d8ae008309c3c27533ad624108a577627c8a1a657cbda9ed5

Sharing

Copy URL Twitter E-mail

General

Target

8c79ef97ac9c2e0d8ae008309c3c27533ad624108a577627c8a1a657cbda9ed5
Size

181KB
MD5

64707a1f4335b2e410159f2e44f7e7e8
SHA1

ff5cd884b6d8f9b766dc97cdd95a15f0b0120125
SHA256

8c79ef97ac9c2e0d8ae008309c3c27533ad624108a577627c8a1a657cbda9ed5
SHA512

20a5332941827393a28ac6020ed509be3002a71066f7d28b3723e7db710f33b0b24edd990f4a1131a0e278efc4ae3c2d6ebca7ad6bb67c47b4e6390e8d6b13c5
SSDEEP

3072:qelxwyI3U88ixB0FeL9H06WncQRgqaA8KejOPyxSfP68WS:ZIk+BhH06wRgo+xMP6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c79ef97ac9c2e0d8ae008309c3c27533ad624108a577627c8a1a657cbda9ed5

Files

8c79ef97ac9c2e0d8ae008309c3c27533ad624108a577627c8a1a657cbda9ed5
.exe windows:6 windows x86 arch:x86

7f603e9085807e83a03e41620002e60a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExA
RegSetValueExW
RegCloseKey

user32

MessageBoxA

kernel32

CreateFileW
DecodePointer
SetEnvironmentVariableW
GetFileAttributesW
GetFullPathNameW
CloseHandle
WaitForSingleObject
GetCurrentProcessId
TerminateProcess
ResumeThread
CreateProcessW
GetModuleFileNameW
GetModuleHandleW
lstrcpyW
lstrlenA
lstrlenW
GetPrivateProfileStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
LCMapStringW
GetProcessHeap
SetFilePointerEx
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�~F�u
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7f603e9085807e83a03e41620002e60a

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

user32

kernel32

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 2KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.rsrc Size: 66KB - Virtual size: 66KB

�~F�u Size: 16KB - Virtual size: 20KB

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 2KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 66KB - Virtual size: 66KB

�~F�u
Size: 16KB - Virtual size: 20KB