7687753f4e8f018fe6b61d5a8ec11bae

General

Target

7687753f4e8f018fe6b61d5a8ec11bae
Size

414KB
MD5

7687753f4e8f018fe6b61d5a8ec11bae
SHA1

bf7d52d03ec86568a38385b3c54a8d95efc55833
SHA256

34c84fad9b796e33f22faa833b1c919cfe6961a2f8098d94e1e664bf3db0813a
SHA512

ee506c7f8538074601bf14551f405003d245ea84b16b8ddf343d885d0ca0b995fd20008ffd25539256b9acdd15f28f7adeb459846e9176229ef9783df69c0d6d
SSDEEP

12288:sm1EVbounkPU7vdqvL+P2+qr1I3LZLZQT:sTFnMU4vL+M5CZLZQT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7687753f4e8f018fe6b61d5a8ec11bae

Files

7687753f4e8f018fe6b61d5a8ec11bae
.exe windows:4 windows x86 arch:x86

2004fb7f95f13d0f90b02df4b560cdc8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
VirtualAlloc
CloseHandle
Sleep
GetThreadPriority
GetProfileStringW
FindAtomW
SetUnhandledExceptionFilter
ChangeTimerQueueTimer
GetAtomNameA
GetSystemDefaultUILanguage
ord1
GetVersionExW
SetCommState
ExitProcess
_lclose
CreateEventW
GetTempPathA

msrepl40

ord2001
ord2042
ord2024
ord2041

rtutils

TraceDeregisterW
RouterLogEventStringA
TraceRegisterExA
RouterLogEventExW
LogEventW
TraceDumpExA
RouterLogEventDataA
RouterLogDeregisterW
LogEventA
TracePutsExA
RouterLogEventStringW
RouterLogRegisterA
LogErrorA
TracePrintfA
TraceDeregisterExA
TracePrintfExW
RouterLogDeregisterA
RouterLogEventW
TraceRegisterExW
LogErrorW

msvbvm60

__vbaForEachCollVar
ord690
_adj_fdiv_m32
__vbaVarDup
__vbaAptOffset
ord304
__vbaChkstk
ord520
_CItan
_allmul
ord709
__vbaGosubFree
_adj_fdiv_m32i
__vbaFreeStrList
ord647
__vbaForEachCollObj
__vbaFpR8
ord102
__vbaFileOpen
ord711

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textbs
Size: 381KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2004fb7f95f13d0f90b02df4b560cdc8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msrepl40

rtutils

msvbvm60

Sections

.text Size: 12KB - Virtual size: 11KB

.CRT Size: - Virtual size: 22KB

.textbs Size: 381KB - Virtual size: 477KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 12KB - Virtual size: 11KB

.CRT
Size: - Virtual size: 22KB

.textbs
Size: 381KB - Virtual size: 477KB

.rsrc
Size: 19KB - Virtual size: 19KB