7922df7b5a5d3935fd9b578be6fc52d8

Sharing

Copy URL Twitter E-mail

General

Target

7922df7b5a5d3935fd9b578be6fc52d8
Size

116KB
MD5

7922df7b5a5d3935fd9b578be6fc52d8
SHA1

cf1a836f2dbab3bd77cc3f659b8986f3a7c4f7fa
SHA256

7b222c12961229a6387b9cb400e553baf12e8b57a693f54057d63e56b747d1db
SHA512

b5770b5a2e00a29c1a3619214163bb38f842ce8a30d2c76a1863dd989123dbbe0ea9b3a5d9e6769698198a4f00897d885500870f90f8f5f795a913821c2dae17
SSDEEP

3072:+H9JXvT+0T4C0XyTW8uLgXsL3aR5tBg8CditeQ3TDNp:+Hn7+iOyT7sOnjDNp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7922df7b5a5d3935fd9b578be6fc52d8

Files

7922df7b5a5d3935fd9b578be6fc52d8
.exe windows:6 windows x86 arch:x86

af249873c15545bfe88dfd2df4828c2b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

TlsAlloc
DecodePointer
CreateDirectoryA
CloseHandle
GetLastError
WaitForSingleObject
CreateMutexA
GetCurrentProcess
TerminateProcess
CreateThread
CreateProcessA
GetProcAddress
LoadLibraryA
CopyFileA
WriteConsoleW
SetEndOfFile
HeapReAlloc
HeapSize
ReadConsoleW
ReadFile
CreateFileW
FlushFileBuffers
GetProcessHeap
LCMapStringW
CompareStringW
GetStringTypeW
GetFileType
SetStdHandle
SetEnvironmentVariableW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RaiseException
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetCommandLineA
GetCommandLineW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
MultiByteToWideChar
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW

api-ms-win-core-registry-l1-1-0

RegSetValueExA
RegCreateKeyExA
RegCloseKey

api-ms-win-core-registry-l1-1-1

RegDeleteKeyValueA

ws2_32

socket
shutdown
setsockopt
sendto
inet_addr
htons

winhttp

WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpOpenRequest

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af249873c15545bfe88dfd2df4828c2b

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

api-ms-win-core-registry-l1-1-0

api-ms-win-core-registry-l1-1-1

ws2_32

winhttp

Sections

.text Size: 63KB - Virtual size: 63KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 2KB - Virtual size: 5KB

.gfids Size: 512B - Virtual size: 180B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 63KB - Virtual size: 63KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 2KB - Virtual size: 5KB

.gfids
Size: 512B - Virtual size: 180B

.reloc
Size: 4KB - Virtual size: 4KB