8802ad7f2d267b754afef8fd81fe8e5f0ecc13e7f69b82e89e980922d94291ba

General

Target

8802ad7f2d267b754afef8fd81fe8e5f0ecc13e7f69b82e89e980922d94291ba
Size

127KB
MD5

bb5511a6586ba04335712e6c65e83671
SHA1

331151dc805875de7a7453ad00803ee9621ea0ce
SHA256

8802ad7f2d267b754afef8fd81fe8e5f0ecc13e7f69b82e89e980922d94291ba
SHA512

d361e2faf6cd5dcb3b6afb1dcdec5f9e457ddf6e24a6f3202dd04603142c02d4eff0eb87f48947e9f1284396aa85eae1dedcefab7ff88c00d624b089fc2c34fe
SSDEEP

3072:IRi/Y2dxHcLMFphR5CLF9SCP1GFOQ1wQEADuFTiYa:Ci/Ym8AT58huOQ1eAKVda

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8802ad7f2d267b754afef8fd81fe8e5f0ecc13e7f69b82e89e980922d94291ba

Files

8802ad7f2d267b754afef8fd81fe8e5f0ecc13e7f69b82e89e980922d94291ba
.exe windows:4 windows x86 arch:x86

6aa61c2ee90a8ecfeef1d9c8aef1e0e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

??1type_info@@UAE@XZ
_CxxThrowException
strcpy
strrchr
printf
__CxxFrameHandler
_access
strcat
sprintf
strlen
??2@YAPAXI@Z
memset
memcpy
??3@YAXPAX@Z
_strcmpi

psapi

GetProcessMemoryInfo

kernel32

lstrcmpiA
Process32Next
CreateToolhelp32Snapshot
Process32First
OutputDebugStringA
GetLastError
CreateFileA
CloseHandle
GetCurrentProcess
ReadFile
SetFilePointer
WriteFile
GetFileSize
CreateProcessA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
MoveFileExA
CopyFileA
DeleteFileA
LockResource
SizeofResource
LoadResource
FindResourceA
GetVersionExA
WaitForSingleObject
GetStartupInfoA
Sleep
DeviceIoControl
GetWindowsDirectoryA
LoadLibraryA
GetCommandLineA
GetProcAddress
VirtualProtect
VirtualQuery
GetSystemDirectoryA

user32

PostQuitMessage
SetWindowLongA
SetTimer
KillTimer
DialogBoxParamA
GetWindowLongA
EndDialog

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CloseServiceHandle
DeleteService
ControlService
OpenServiceA
OpenSCManagerA
QueryServiceStatus
StartServiceA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6aa61c2ee90a8ecfeef1d9c8aef1e0e8

Headers

File Characteristics

Imports

msvcrt

psapi

kernel32

user32

advapi32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 832B

.rsrc Size: 114KB - Virtual size: 114KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 832B

.rsrc
Size: 114KB - Virtual size: 114KB