1c7cfde4b9a44101aed968b9923f3595

Sharing

Copy URL Twitter E-mail

General

Target

1c7cfde4b9a44101aed968b9923f3595
Size

45KB
MD5

1c7cfde4b9a44101aed968b9923f3595
SHA1

fba8f6897eb642975273ca47a09d5c603a410533
SHA256

e1e5b1cca582c0099bb51f3ece3006c01a594939fdb5a16d96f258341b6d62de
SHA512

e35dd05af45b9055f5e9b290cebdc056ee298b5b88f1546b4b3e6b329a10126d4a8bc3e3cf925f455a8f1fb6a247075272a6b1685b746ceafe0b942ee20ca143
SSDEEP

768:l7HvI7a5v4i7f5GCd40vPIOHT2mCXmJcevjY9mlzSD:lb0aiiz5PHwQce7YEhg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c7cfde4b9a44101aed968b9923f3595

Files

1c7cfde4b9a44101aed968b9923f3595
.exe windows:5 windows x86 arch:x86

fa69d88a723b3e29155f951780eed626

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsW
GetDateFormatA
GlobalAddAtomW
InterlockedDecrement
GetProcessVersion
DeviceIoControl
GetProcAddress
lstrcmpW
FormatMessageW
GetPrivateProfileIntW
GetFileAttributesW
WideCharToMultiByte
LocalLock
InterlockedIncrement
CreateDirectoryW
HeapFree
CreateFileW
SetLastError
GetTempPathW
WriteFile
SetFilePointer
GetTimeFormatW
DuplicateHandle
CloseHandle
CopyFileW
GetCurrentThreadId
DeleteFileW
GetCurrentProcessId
GetPrivateProfileSectionW
GetModuleHandleA
GetWindowsDirectoryW
GetFileSize
lstrcmpiW
ReadFile
DnsHostnameToComputerNameA
IsWow64Process
GetFullPathNameW
GlobalWire
GetExitCodeProcess
lstrlenA
BackupRead
GetTempPathA
GetProcessHeap
FreeLibrary
GetSystemDirectoryW
IsValidLocale
LocalAlloc
GetVolumeInformationW
SetThreadPriority
GlobalFree
GetThreadLocale
CreateFileA
IsBadCodePtr
SwitchToThread
lstrlenW
GetTickCount
GetFileTime
HeapAlloc
GetDateFormatW
RaiseException
SetCurrentDirectoryW
GetCurrentProcess
RemoveDirectoryA
WaitNamedPipeW
GetCommandLineW
LocalReAlloc
ReleaseMutex
GetStartupInfoA
OpenEventW
GetSystemTimeAsFileTime
GetModuleFileNameW
GlobalAlloc
QueryPerformanceCounter
MultiByteToWideChar
GetLogicalDriveStringsW
GetPrivateProfileStringW
LocalFree
CreateMutexW

gdi32

GetStockObject

user32

GetWindowDC
IsRectEmpty
GetWindowInfo
SetFocus

comctl32

ImageList_Create
ImageList_Destroy
ImageList_AddMasked

shell32

SHGetFileInfoW
SHFileOperationW
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rxdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 139KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa69d88a723b3e29155f951780eed626

Headers

File Characteristics

Imports

kernel32

gdi32

user32

comctl32

shell32

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 7KB - Virtual size: 117KB

.rxdata Size: 5KB - Virtual size: 5KB

.pdata Size: 139KB - Virtual size: 243KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 7KB - Virtual size: 117KB

.rxdata
Size: 5KB - Virtual size: 5KB

.pdata
Size: 139KB - Virtual size: 243KB