8dcaae760931f79f9cf35a97d87f2690d2f37870f439f44c4317a9702c69c4da

Sharing

Copy URL Twitter E-mail

General

Target

8dcaae760931f79f9cf35a97d87f2690d2f37870f439f44c4317a9702c69c4da
Size

6.6MB
MD5

912c2d6ddb0a5fa2b5dcf3aefd9f4a79
SHA1

9750b89bfcb90700fdc9193c45ba3f678145a3df
SHA256

8dcaae760931f79f9cf35a97d87f2690d2f37870f439f44c4317a9702c69c4da
SHA512

2117a9a552336df83ebf76cf3400baffddacbc78ea0e3f94290a9da6b1ad1658f96bcdc84212ff1b9f117063ad1950e997c357bea7943fc83b69138fc82ff3a0
SSDEEP

6144:7Kszgl5nRnJ8qLZ7sLtAsUXC/Fnz0RnJ8qLZ7sLtAsUXC/FBz:EnJ861sBQS/FzgnJ861sBQS/FR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dcaae760931f79f9cf35a97d87f2690d2f37870f439f44c4317a9702c69c4da

Files

8dcaae760931f79f9cf35a97d87f2690d2f37870f439f44c4317a9702c69c4da
.exe windows:4 windows x86 arch:x86

d45534c02a2801cb7f9ba3f10b451924

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindResourceA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GetWindowsDirectoryA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
LoadResource
LockResource
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SizeofResource
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile

shell32

ShellExecuteA

user32

EnumThreadWindows
MessageBoxA
PeekMessageA
wsprintfA

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

gu_idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

gu_rsrcs
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d45534c02a2801cb7f9ba3f10b451924

Headers

File Characteristics

Imports

kernel32

shell32

user32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 12KB - Virtual size: 12KB

.tls Size: 4KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 4KB

.edata Size: 4KB - Virtual size: 4KB

.rsrc Size: 92KB - Virtual size: 92KB

.reloc Size: 8KB - Virtual size: 8KB

gu_idata Size: 1KB - Virtual size: 4KB

gu_rsrcs Size: 95KB - Virtual size: 95KB

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 12KB - Virtual size: 12KB

.tls
Size: 4KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 4KB

.edata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 92KB - Virtual size: 92KB

.reloc
Size: 8KB - Virtual size: 8KB

gu_idata
Size: 1KB - Virtual size: 4KB

gu_rsrcs
Size: 95KB - Virtual size: 95KB