7f36440d463914a950f2ba7fb2141d0b378e5e9db54596f5c8669be5c9870430

Sharing

Copy URL

Twitter E-mail

General

Target

7f36440d463914a950f2ba7fb2141d0b378e5e9db54596f5c8669be5c9870430
Size

3.3MB
MD5

dd198bd0b1a473649ec80e34f5d183e1
SHA1

fc3447951bbf3db860055aa4592a57842a2b9896
SHA256

7f36440d463914a950f2ba7fb2141d0b378e5e9db54596f5c8669be5c9870430
SHA512

476aa89dde3f162967b5bfb78c7ba8791e91f26eb353d7dffb6ce4015b012c7e8edd3fde8f347ea3304f86b410cb5788459132ed6d05a2e88dc27efd85b96e2c
SSDEEP

49152:KpA8kkz9rZFXJX3WRxoOG48lxbe/xdiCvREkrs6k+:KpA1kNX53WRfj+Be/xdvvik46

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f36440d463914a950f2ba7fb2141d0b378e5e9db54596f5c8669be5c9870430

Files

7f36440d463914a950f2ba7fb2141d0b378e5e9db54596f5c8669be5c9870430
.exe windows x86

77ead28c45f6281fcee5a3fda61ff73e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetProcAddress
GetModuleHandleExA
RtlMoveMemory
lstrcpynA
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetTickCount
FreeLibrary
LoadLibraryA
LCMapStringA

msvcrt

srand
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
_atoi64
atof
atoi
free
malloc
_ftol
rand
strchr
modf
realloc
memmove
strncmp
__CxxFrameHandler

user32

MessageBoxA
wsprintfA
GetWindowTextA
GetWindowTextLengthA
GetWindowLongA
SetWindowPos
ScreenToClient
GetWindowRect
SetWindowLongA
ShowWindow
GetDlgItem
SetWindowTextA
PostQuitMessage
DestroyWindow
DispatchMessageA
TranslateMessage
SendMessageA
GetMessageA
UpdateWindow
CreateDialogIndirectParamA

Sections

.text
Size: 728KB - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 122KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvmp0
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp1
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp3
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

77ead28c45f6281fcee5a3fda61ff73e

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 728KB - Virtual size: 727KB

.rdata Size: 348KB - Virtual size: 347KB

.data Size: 122KB - Virtual size: 361KB

.rsrc Size: 36KB - Virtual size: 35KB

.xvmp0 Size: 36KB - Virtual size: 36KB

.xvmp1 Size: 2.0MB - Virtual size: 2.0MB

.xvmp2 Size: 4KB - Virtual size: 4KB

.xvmp3 Size: 40KB - Virtual size: 40KB

.text
Size: 728KB - Virtual size: 727KB

.rdata
Size: 348KB - Virtual size: 347KB

.data
Size: 122KB - Virtual size: 361KB

.rsrc
Size: 36KB - Virtual size: 35KB

.xvmp0
Size: 36KB - Virtual size: 36KB

.xvmp1
Size: 2.0MB - Virtual size: 2.0MB

.xvmp2
Size: 4KB - Virtual size: 4KB

.xvmp3
Size: 40KB - Virtual size: 40KB