8666d02a81d6eaf31be2da61b927451792912431683afe9feee859e7cb88fc2a

General

Target

8666d02a81d6eaf31be2da61b927451792912431683afe9feee859e7cb88fc2a
Size

28KB
MD5

10f82943cfa0b431a454aaf9f1a49f25
SHA1

e35362fc297fdb15a775cdd722adf7b527a3f4ad
SHA256

8666d02a81d6eaf31be2da61b927451792912431683afe9feee859e7cb88fc2a
SHA512

e7d041f28604c2aa7747b720f05a9b4bb6a8538e4a5e83c17d918e8a5a109807e206d46ba6a3f4610f1505c9b7b722d48321f3ee2050f0e3f117aa995f2bb2d4
SSDEEP

384:fU4uc4mSeKgM9LLGVGJVP25I9LchV1YJz3fq:mc4mgx9LLCyN204o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8666d02a81d6eaf31be2da61b927451792912431683afe9feee859e7cb88fc2a

Files

8666d02a81d6eaf31be2da61b927451792912431683afe9feee859e7cb88fc2a
.dll windows:4 windows x86 arch:x86

0f2383121dc8afd498636a794e882654

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
CreateThread
CloseHandle
GetLastError
CreateEventA
GetSystemDirectoryA
CreateFileA
SetErrorMode
DeviceIoControl
GetLogicalDrives
GetProcAddress
LoadLibraryA
GetLogicalDriveStringsA
CreateFileW
GetDriveTypeA
SetEvent
ResetEvent
WaitForSingleObject

user32

MessageBoxW

msvcrt

toupper
swprintf
sprintf
free
malloc
_initterm
_adjust_fdiv

Exports

Exports

AssignDriveLetter
GetDiskMapGlobal
GetWDiskType
IsWin2K
IsWin95
IsWinLongHorn
IsWinNT
IsWinXP
MapDriveLetter
OurFlushDrive
SDDiskInit
SDGetDrvPartInfo
WCall
WdGetAllInfo
WdGetBootFlag
WdGetData
WdGetHookGlobalInfo
WdGetHookTransferInfo
WdGetPartitionInfo
WdGetValue
WdSendCmd
WdSetBootFlag
WdStat0
checkDrvProperty
globalDiskMap_Refresh

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f2383121dc8afd498636a794e882654

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 816B

.reloc Size: 4KB - Virtual size: 582B

.text
Size: 8KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 816B

.reloc
Size: 4KB - Virtual size: 582B