07fc899a47e6e72d98913ac8eba758e8

Sharing

Copy URL

Twitter E-mail

General

Target

07fc899a47e6e72d98913ac8eba758e8
Size

26KB
MD5

07fc899a47e6e72d98913ac8eba758e8
SHA1

d85f1ca24f97b9d3fdc7583b6a051a3e989225b4
SHA256

e63e7f37b11bfabf89415b22ccd542ea5e23ac884a5bc9e4183180f150e50293
SHA512

618d779166921b48ca52fed188ccae7eba3a117fd601cfa21956aeb51a3a19fd09d75f29f7d5147ec1fcbdc099d965cb583bdab4e612941a308e7c63b707797f
SSDEEP

384:TFEOGGBXtldlsfZtZwFnT+ylyIukpyOsIh87EQo:TZBXt3YZuT+pIukpyOsQ879o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07fc899a47e6e72d98913ac8eba758e8

Files

07fc899a47e6e72d98913ac8eba758e8
.exe windows:1 windows x86 arch:x86

f4b09b6d32abe3db5aed06142b66ac52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetSystemDirectoryA
CopyFileA
MultiByteToWideChar
OpenProcess
Process32First
Process32Next
RtlUnwind
Sleep
TerminateProcess
CreateToolhelp32Snapshot

advapi32

RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

crtdll

__GetMainArgs
_ltoa
remove
atol
difftime
exit
fclose
fopen
malloc
memset
raise
signal
sprintf
sscanf
strcat
strchr
strcmp
time

gdi32

GetStockObject
CreateFontA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

rasapi32

RasDialA
RasEnumConnectionsA
RasEnumEntriesA
RasGetConnectStatusA
RasGetEntryDialParamsA
RasGetEntryPropertiesA
RasHangUpA
RasSetEntryDialParamsA
RasSetEntryPropertiesA
RasDeleteEntryA

shell32

ShellExecuteA
FindExecutableA
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

user32

SetWindowTextA
GetWindowTextA
DialogBoxParamA
EndDialog
GetDlgItem
GetClassNameA
SetForegroundWindow
LoadCursorA
LoadIconA
SetTimer
KillTimer
CreatePopupMenu
InsertMenuA
TrackPopupMenu
RegisterClassA
MessageBoxA
GetCursorPos
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
PostMessageA
PostQuitMessage
EnumWindows
CreateWindowExA
DestroyWindow
DefWindowProcA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rebld_r
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rebld_i
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f4b09b6d32abe3db5aed06142b66ac52

Headers

File Characteristics

Imports

kernel32

advapi32

crtdll

gdi32

ole32

rasapi32

shell32

user32

Sections

.text Size: 9KB - Virtual size: 9KB

.bss Size: - Virtual size: 5KB

.data Size: 4KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 3KB

.rebld_r Size: 2KB - Virtual size: 2KB

.rebld_i Size: 1KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.bss
Size: - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 3KB

.rebld_r
Size: 2KB - Virtual size: 2KB

.rebld_i
Size: 1KB - Virtual size: 1KB