7a239b9e8c0c25f7ca5c607abf624ef7

Sharing

Copy URL Twitter E-mail

General

Target

7a239b9e8c0c25f7ca5c607abf624ef7
Size

2.3MB
MD5

7a239b9e8c0c25f7ca5c607abf624ef7
SHA1

1320ab50c6e9df2ea55dda4ddc61949a9a857dab
SHA256

1626680bda871ecdf8b78cdd85e08db7bd96c19cc1c97801e2b64cefadae140e
SHA512

3e1f1441c7c9f72dd5e9c07e91c83332fecbcff0e750c9fa6096d8f826beb5af5f5b475a096133e45cce28bc54a5ec49b512fd81f1118ff40da0b059fbba1c1f
SSDEEP

49152:wP/PR5iTdweXvchZxtZceZZqy2dg8jfzpQCk:wPviTb0zxtZbHr2dg8jfdQr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a239b9e8c0c25f7ca5c607abf624ef7

Files

7a239b9e8c0c25f7ca5c607abf624ef7
.exe windows:4 windows x86 arch:x86

167ab12c68c0499597bf170a9cc4d50c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SafeArrayCreate
VariantChangeTypeEx
SafeArrayPutElement
VariantCopyInd
VariantClear

kernel32

lstrcmpiW
Sleep
SetHandleCount
TlsAlloc
LoadResource
IsValidLocale
GetCommandLineA
FindResourceW
GetStdHandle
LocalAlloc
EnterCriticalSection
FreeEnvironmentStringsW
GetProcAddress
GetLastError
TerminateProcess
GetCurrentThreadId
GetFileSize
WideCharToMultiByte
GetCurrentDirectoryA
GetSystemTimeAsFileTime
HeapCreate
LoadLibraryExA
SetStdHandle
ReadConsoleW
MultiByteToWideChar
AreFileApisANSI
SetFileAttributesA
SetEvent
LockResource
MapViewOfFile
ReadFile
UnhandledExceptionFilter
VirtualAlloc
FindFirstFileW
HeapAlloc
LeaveCriticalSection
QueryPerformanceCounter
RtlUnwind
InterlockedExchange
SetLastError
SetThreadPriority
GetStringTypeA
GlobalLock
CloseHandle
SetUnhandledExceptionFilter
GetVersionExW
GlobalAlloc
SetFilePointer
WriteFile
GetModuleHandleA
WritePrivateProfileStringW
ExpandEnvironmentStringsW
LoadLibraryA
GetFileType
HeapDestroy
HeapReAlloc
GetModuleHandleW

gdi32

CreateSolidBrush
CreateBrushIndirect
SelectObject
CreateFontW
CreateDCW
GetBkColor
CreateFontIndirectA
CreateCompatibleDC
EndPage
CreateFontIndirectW
SetWindowExtEx
GetDIBits
DeleteObject
FrameRgn
SetTextColor
GetDeviceCaps
SetPixel
SetBkMode
SetBkColor
SetDCPenColor
RectVisible
GdiFlush
DeleteDC
GetCurrentPositionEx
RealizePalette
TextOutW

comctl32

ImageList_SetImageCount
_TrackMouseEvent
ImageList_GetImageCount
ImageList_Destroy
ImageList_ReplaceIcon

shell32

StrStrA
StrChrA

advapi32

RegOpenKeyA
RegisterEventSourceW
RegDeleteKeyA
CopySid
RegSetValueExW
OpenProcessToken
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
AllocateAndInitializeSid
RegEnumValueA
CryptHashData
RegOpenKeyExA

shlwapi

PathFindExtensionA
PathFindExtensionW
StrToIntA
PathRemoveFileSpecW
PathRemoveBackslashW
PathStripToRootW
PathCompactPathExW
UrlUnescapeW
PathStripPathW
PathFileExistsW
StrTrimA

user32

EnableWindow
DestroyMenu
KillTimer
GetDC
UpdateWindow
DestroyWindow
MsgWaitForMultipleObjects
ShowWindow
MessageBoxW
LoadCursorA
GetDlgItem
OffsetRect
SetCursor
GetSysColor
GetMenuItemCount
CharToOemA
GetWindowThreadProcessId
ClientToScreen
OpenClipboard
GetSubMenu
TranslateAcceleratorW
CharLowerA
GetWindowLongW
LoadBitmapW
GetWindowLongA
IsWindow
SetWindowPos
GetSysColorBrush
DrawTextA
SetWindowLongW
CallWindowProcW
MoveWindow
DrawFrameControl
GetParent
PeekMessageA
AppendMenuW
LoadImageW
IsWindowEnabled
GetNextDlgTabItem
SendMessageW
InvalidateRect
GetMenuState
ExitWindowsEx
SetDlgItemTextW
UnregisterClassW
ReleaseCapture
SetActiveWindow
BringWindowToTop
wsprintfA
LoadBitmapA
SystemParametersInfoA
GetSystemMetrics
LoadCursorW
PostQuitMessage
GetClientRect
TranslateMessage
GetMenu
SetWindowTextW
EndDialog
SetWindowsHookExW
GetFocus
WindowFromPoint
BeginPaint
GetWindowRect
CharNextA
CharUpperW
RegisterClassA
CallNextHookEx
LoadStringW
CreateDialogParamW

msvcrt

wcscpy
_getche
_controlfp
__set_app_type
_vsnwprintf
swprintf
_initterm
_XcptFilter
_makepath
qsort
_wfopen
malloc
_adjust_fdiv
fclose
__getmainargs
free
calloc
wcsncpy
_except_handler3
_exit

Sections

.text
Size: 204KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

167ab12c68c0499597bf170a9cc4d50c

Headers

File Characteristics

Imports

oleaut32

kernel32

gdi32

comctl32

shell32

advapi32

shlwapi

user32

msvcrt

Sections

.text Size: 204KB - Virtual size: 200KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 1.9MB - Virtual size: 1.9MB

.rsrc Size: 188KB - Virtual size: 184KB

.text
Size: 204KB - Virtual size: 200KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 1.9MB - Virtual size: 1.9MB

.rsrc
Size: 188KB - Virtual size: 184KB