8fa8a05213085951f660a22dffd40e7e

Sharing

Copy URL

Twitter E-mail

General

Target

8fa8a05213085951f660a22dffd40e7e
Size

339KB
MD5

8fa8a05213085951f660a22dffd40e7e
SHA1

23c6c7af7c9cd6beb0fb0894d67de196aad40162
SHA256

8ae8fe3a254a2d00c8510b3d5fc0c5e4db6ff36dd9d0583cf324e98d9cd41603
SHA512

58c539d56f923f96cfb6b29bcef5710cedbe3d09a34716c6775c489e7e5529865ee3a63f06468edbdf8401b090e902c9099a01362076b44f0bdce72f75ba538f
SSDEEP

6144:dTuK40DDwVJb4cyczvGa/wowIJP4mVYZQ01p0pzq7I9il:do0HwVKcyG7/wowIJgbQKgN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fa8a05213085951f660a22dffd40e7e

Files

8fa8a05213085951f660a22dffd40e7e
.exe windows:5 windows x86 arch:x86

16b517ccf834c07f7e25d3ab80ec0ed4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\viwewonudofibe\moca\vahanan97\bidelelunayoye\27\zifivayevow.pdb

Imports

kernel32

InterlockedDecrement
SetMailslotInfo
GetCommConfig
GetConsoleAliasesLengthA
GetConsoleTitleA
InitializeCriticalSection
Sleep
ReadConsoleInputA
GetCalendarInfoW
IsBadCodePtr
GetStringTypeExW
GetAtomNameW
CreateMailslotW
RaiseException
LCMapStringA
UpdateResourceA
GetProcAddress
VirtualAlloc
SetFileAttributesA
LoadLibraryA
LocalAlloc
DnsHostnameToComputerNameA
FoldStringA
GetModuleFileNameA
LoadLibraryExA
GetConsoleTitleW
DeleteCriticalSection
GetVersionExA
CreateThread
GetLocaleInfoA
GetDefaultCommConfigW
GetStdHandle
GetComputerNameA
WideCharToMultiByte
InterlockedIncrement
InterlockedExchange
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
LCMapStringW
GetStringTypeW
WriteFile
HeapAlloc
HeapCreate
VirtualFree
HeapReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ReadFile
CloseHandle
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
HeapSize
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

gdi32

GetCharWidthFloatW

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 255KB - Virtual size: 40.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16b517ccf834c07f7e25d3ab80ec0ed4

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 255KB - Virtual size: 40.1MB

.rsrc Size: 33KB - Virtual size: 33KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 255KB - Virtual size: 40.1MB

.rsrc
Size: 33KB - Virtual size: 33KB