7a32628bc8b43d904899405d66840cf7

Sharing

Copy URL Twitter E-mail

General

Target

7a32628bc8b43d904899405d66840cf7
Size

201KB
MD5

7a32628bc8b43d904899405d66840cf7
SHA1

49e9ac9df85da9012dbd7c40722d42aa2e004775
SHA256

3661fd8c83ca330baa8d1ce74b2b999b6041fc7e4b971f3fce00aa79b731de69
SHA512

dff93a9f8bcf077ec02751e45b6bc40edfed096c7c8a9acb641173c6376db40a0784829f73c7188b4d0a8bbff5ee47a73ec04970e0c5381b3f635d0229710d30
SSDEEP

3072:pP/vjqD31pqLOZGMneT5+t3r++J/aSWxuM1d6JdRIN12W8tD8FTpTLimttNwZHVz:l/7ykLOZoTUV7YCRI/YtIqmttCZQRY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a32628bc8b43d904899405d66840cf7

Files

7a32628bc8b43d904899405d66840cf7
.dll windows:4 windows x86 arch:x86

49791ccf29aaf3d1312435e0714ecfbe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_Read
ImageList_Remove
ImageList_Add
ImageList_Create

kernel32

HeapFree
LocalReAlloc
GetCurrentProcess
HeapAlloc
VirtualAllocEx
SetEvent
MoveFileExA
GetModuleHandleW
ExitProcess
GetUserDefaultLCID
LocalFree
lstrlenW
LoadLibraryA
GetCurrentThread
ExitThread
EnumCalendarInfoA
lstrcmpiA
GetLastError
GetStringTypeW
GetDiskFreeSpaceA
WideCharToMultiByte
MoveFileA
GlobalDeleteAtom
GetSystemDefaultLangID

user32

MsgWaitForMultipleObjects
GetWindow
ShowWindow
IsCharLowerA
IsIconic
IsCharUpperA
DefWindowProcA
DrawFrameControl
IsDlgButtonChecked
InvalidateRect
SetMenuItemInfoA
UnregisterClassA
IsWindowEnabled
GetKeyboardLayout
GetClassLongA
GetDesktopWindow
GetCursor
TrackPopupMenu
SetParent
GetActiveWindow
MessageBoxA
AdjustWindowRectEx
ClientToScreen
GetDC
GetWindowLongA
DestroyCursor
GetMenuStringA
EnableWindow
IsDialogMessageA
GetFocus
PostQuitMessage
InsertMenuItemA
GetScrollPos
SetCapture
SetWindowPlacement
EnumThreadWindows
MoveWindow
DrawEdge
RegisterWindowMessageA
GetLastActivePopup
DestroyIcon
PeekMessageA
EqualRect
FrameRect
GetMenu
GetMenuItemCount
GetKeyboardLayoutList
GetClientRect
SetMenu
CharUpperA
SetForegroundWindow
GetMenuState
DestroyWindow
LoadIconA
DrawIconEx
SetWindowLongA
GetWindowDC
InsertMenuA
CreateIcon
GetMenuItemInfoA
DispatchMessageA

gdi32

CreateDIBitmap
CreateBrushIndirect

Exports

Exports

_oAXZX0@12

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49791ccf29aaf3d1312435e0714ecfbe

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 9KB - Virtual size: 152KB

.data Size: 147KB - Virtual size: 147KB

.edata Size: 4KB - Virtual size: 3KB

.badata Size: 2KB - Virtual size: 1KB

.rsrc Size: 14KB - Virtual size: 13KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 9KB - Virtual size: 152KB

.data
Size: 147KB - Virtual size: 147KB

.edata
Size: 4KB - Virtual size: 3KB

.badata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 14KB - Virtual size: 13KB

.reloc
Size: 4KB - Virtual size: 3KB