07a4ca8053ade33bb90537d21b387b64

Sharing

Copy URL Twitter E-mail

General

Target

07a4ca8053ade33bb90537d21b387b64
Size

136KB
MD5

07a4ca8053ade33bb90537d21b387b64
SHA1

68b4012ba2d3d2649e664d3adb16812505b8e21f
SHA256

eda38f76aa6e92d4497fd28995545dece9af9a375a4ed801fe6861fa838954a0
SHA512

7fc5d7bd0f78c33a6687efc43212c54a6c802bf846251ade51f6d090eec2f6bb2c6f0f8ca6187e4e6aa08b1f0a17de12450900a81f77b64d2b941526b78f2c4e
SSDEEP

3072:+7AJgp7J5P8fWR9X7SXBpHBOSeP9lhnCvjFUPw9Y:+7AJgp778fW/X+x5BOLP9lhn82wy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07a4ca8053ade33bb90537d21b387b64

Files

07a4ca8053ade33bb90537d21b387b64
.exe windows:4 windows x86 arch:x86

8023108d430b3dc779f4536d930a6f82

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
GetCalendarInfoA
IsBadWritePtr
GetShortPathNameW
CreateFileMappingW
SetCalendarInfoW
TlsAlloc
EnumDateFormatsW
OpenSemaphoreW
CreateNamedPipeW
BeginUpdateResourceW
GetSystemDirectoryA
GetTempFileNameA
GetDateFormatW
CreateFileA
GetProcessHeap
MoveFileA
GetLongPathNameA
CreateSemaphoreW
SuspendThread
GetFileSize
GetModuleFileNameW
OpenSemaphoreA
AddAtomA
IsBadStringPtrA
GetProcAddress
DosDateTimeToFileTime
CreateSemaphoreA
CopyFileA
GetWindowsDirectoryW
GetSystemDefaultLangID
CreateMutexA
OpenProcess
WinExec
CreateMailslotA
GetCommandLineW
lstrcpynA
AddAtomW
GetModuleHandleA
lstrcpyn
EndUpdateResourceA
lstrcpyA

user32

GetMenuItemCount
SetWindowTextW
ShowWindow
MessageBeep
ClientToScreen
DefFrameProcA
GetWindowLongW
DestroyWindow
CloseWindow
WinHelpW
CharPrevW
GetDC
FlashWindow
CharUpperA
CharLowerW
GetActiveWindow
AdjustWindowRect
GetDlgItemTextW
WaitForInputIdle
InsertMenuW
CreateCaret
CheckRadioButton
CreateWindowExW
FindWindowW
CreateMenu
DialogBoxParamA
FrameRect
GetMenuItemRect
CheckMenuRadioItem
GetWindowLongA
RegisterClassExW

gdi32

CreatePatternBrush
GetBrushOrgEx
GetTextFaceA
GetTextAlign
SetSystemPaletteUse
CreateFontIndirectA
GetICMProfileW
PolyBezierTo
GetCharWidthI
CreateSolidBrush
CreateBitmap
GetPaletteEntries
EnumFontFamiliesExW
BitBlt
OffsetWindowOrgEx
GetViewportOrgEx
ExtSelectClipRgn

advapi32

RegReplaceKeyW
RegEnumValueW
RegDeleteValueW
RegOpenKeyA
RegCreateKeyW
RegFlushKey

shlwapi

PathAddBackslashW

wininet

RunOnceUrlCache
InternetSetCookieA
FtpDeleteFileA
GetUrlCacheConfigInfoA

sqlunirl

_CreateScalableFontResource_@16
_NDdeTrustedShareEnum_@24
_ObjectDeleteAuditAlarm_@12
_ShellAbout_@16

crypt32

CertCreateSelfSignCertificate
CryptMsgVerifyCountersignatureEncoded
CertFreeCertificateChain
CertDuplicateCRLContext
CertVerifyCTLUsage
I_CertSyncStore
CryptVerifyMessageSignatureWithKey
CertRegisterSystemStore
CryptCreateAsyncHandle
CryptMsgVerifyCountersignatureEncodedEx

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.XAxB
Size: 2KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdx
Size: 3KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SQL
Size: 512B - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pK
Size: 1KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GfCucO
Size: 1KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lW
Size: 2KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tfpX
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.BGK
Size: 2KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8023108d430b3dc779f4536d930a6f82

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

wininet

sqlunirl

crypt32

Sections

.text Size: 12KB - Virtual size: 12KB

.XAxB Size: 2KB - Virtual size: 32KB

.sdx Size: 3KB - Virtual size: 31KB

.SQL Size: 512B - Virtual size: 13KB

.pK Size: 1KB - Virtual size: 17KB

.GfCucO Size: 1KB - Virtual size: 20KB

.data Size: 12KB - Virtual size: 11KB

.lW Size: 2KB - Virtual size: 21KB

.tfpX Size: 2KB - Virtual size: 12KB

.BGK Size: 2KB - Virtual size: 200KB

.rsrc Size: 165KB - Virtual size: 164KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.XAxB
Size: 2KB - Virtual size: 32KB

.sdx
Size: 3KB - Virtual size: 31KB

.SQL
Size: 512B - Virtual size: 13KB

.pK
Size: 1KB - Virtual size: 17KB

.GfCucO
Size: 1KB - Virtual size: 20KB

.data
Size: 12KB - Virtual size: 11KB

.lW
Size: 2KB - Virtual size: 21KB

.tfpX
Size: 2KB - Virtual size: 12KB

.BGK
Size: 2KB - Virtual size: 200KB

.rsrc
Size: 165KB - Virtual size: 164KB

.reloc
Size: 1KB - Virtual size: 1KB