e8bcbd100c5984a91d474c9607b7a2770d9be0517bb2a434a86ea93fe9c6ef43

General

Target

e8bcbd100c5984a91d474c9607b7a2770d9be0517bb2a434a86ea93fe9c6ef43
Size

91KB
MD5

856eba1dc2a8a43ac5b20585d06fd867
SHA1

3c7decbcca9f6b6f7ca9016fc3e9afde793525e0
SHA256

e8bcbd100c5984a91d474c9607b7a2770d9be0517bb2a434a86ea93fe9c6ef43
SHA512

f18de6a1fb9019f40e6712efeb6e25c562bbdeac10d1962fbc97c337ca141750fc40edd61282bd5737ba31e6065b1c641d83c79d7cddff17838e8a0cfa6ff33b
SSDEEP

1536:NqN3tSvEvy6kz8O3guNYfOtQMGtbYTjipvF2eoOK:NW3cEaJibYvQd2Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8bcbd100c5984a91d474c9607b7a2770d9be0517bb2a434a86ea93fe9c6ef43

Files

e8bcbd100c5984a91d474c9607b7a2770d9be0517bb2a434a86ea93fe9c6ef43
.exe windows:4 windows x86 arch:x86

ea6c8092f8807723f1489f32ba14c9f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconW
LoadCursorW
RegisterClassExW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
SendMessageW
DestroyWindow
DialogBoxParamW
BeginPaint
DrawTextW
EndPaint
PostQuitMessage
SetFocus
EndDialog
CreateWindowExW

kernel32

HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
VirtualFree
ReadFile
GetTickCount
LoadLibraryA
CreateFileA
GetSystemDirectoryW
CloseHandle
CreateFileW
LoadLibraryW
GetCommandLineW
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapFree
GetEnvironmentStrings
GetProcAddress
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

gdi32

DeleteObject
CreateSolidBrush
SetTextAlign
GetStockObject

comctl32

InitCommonControlsEx

shell32

CommandLineToArgvW
DragFinish
ExtractIconA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea6c8092f8807723f1489f32ba14c9f4

Headers

File Characteristics

Imports

user32

kernel32

gdi32

comctl32

shell32

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 10KB - Virtual size: 14KB

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 10KB - Virtual size: 14KB

.rsrc
Size: 18KB - Virtual size: 18KB