efac7322e699f75e00eca7a08dd81bc341f3509acee926fe7023337d41dc781b

General

Target

efac7322e699f75e00eca7a08dd81bc341f3509acee926fe7023337d41dc781b
Size

87KB
MD5

33d59790d4d3544afd6451254ec798b1
SHA1

425e177eded61c190737181a938079394c2991e5
SHA256

efac7322e699f75e00eca7a08dd81bc341f3509acee926fe7023337d41dc781b
SHA512

3dbf4820571bcd2123464c0babfd02e1457a8078690519706ea8431c12026c3abae09f073a769dc89d8d3e915dbdc4a4ca4f88939cf72aaa27f2cd936446e246
SSDEEP

768:aoEh7sOURN0LAla5fuuRCZA/CI9jvnmDbvE4UcKcGZjHuuynvIwIczJASow6nj:6exeLAc2N2n684UnckHjWlAV1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efac7322e699f75e00eca7a08dd81bc341f3509acee926fe7023337d41dc781b

Files

efac7322e699f75e00eca7a08dd81bc341f3509acee926fe7023337d41dc781b
.exe windows:4 windows x86

97727142d6bcedef8051ce4e3159221f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
SendMessageW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
DefWindowProcA

kernel32

VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
IsProcessorFeaturePresent
GetLocaleInfoW
IsValidLocale
lstrcmpiW
GetProcAddress
GetUserDefaultLCID
EnumSystemLocalesA
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionAndSpinCount
HeapSize
DeleteCriticalSection
HeapFree
GetModuleHandleA
GetProcessHeap
HeapAlloc
LoadLibraryA
GetLocaleInfoA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP

comctl32

ord17

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97727142d6bcedef8051ce4e3159221f

Headers

File Characteristics

Imports

user32

kernel32

comctl32

Sections

.text Size: 56KB - Virtual size: 56KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 17KB - Virtual size: 18KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 56KB - Virtual size: 56KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 17KB - Virtual size: 18KB

.rsrc
Size: 6KB - Virtual size: 5KB