7dbd52e4d605bb9ea563c1b7975659eb

Sharing

Copy URL

Twitter E-mail

General

Target

7dbd52e4d605bb9ea563c1b7975659eb
Size

555KB
MD5

7dbd52e4d605bb9ea563c1b7975659eb
SHA1

3bd89bc67f57c716b36d06ccabef5a2947bf0da5
SHA256

56b7faf5384f9b276d9b612893cce7d8d72e9ad592813dc608ed925e3deee142
SHA512

950c4e9efde3ac9dfa30dd19e66a4f8d45eefa40fe9631e2ca733e6b8177f94a718e3937b77d38cc355afa483455674f4910501a36732b89cd10b04a2a5d4a37
SSDEEP

12288:78asyMBzpM2EAU9jmCdu+d2B9A256knMuJJSY8W4ChlHWBJLSqjsO:7prSpqCd+I9A+PfbXO1NsO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7dbd52e4d605bb9ea563c1b7975659eb

Files

7dbd52e4d605bb9ea563c1b7975659eb
.exe windows:4 windows x86 arch:x86

334574f1ca4a0cfb02e9bd82157f9f2c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
EnumSystemCodePagesW
VirtualProtect
WriteConsoleInputA
GlobalUnfix
GetProcessHeap
IsBadStringPtrA
SizeofResource
SetLastError
GlobalMemoryStatus
RaiseException
lstrcpynA
SetFileApisToOEM
GetProfileIntW
GetFullPathNameA
CreateNamedPipeW
BuildCommDCBAndTimeoutsA
GetPrivateProfileSectionNamesA
OpenEventW
GetConsoleCP
GetStdHandle
WriteConsoleInputW
SetThreadExecutionState
GetTapeStatus
Thread32Next
WriteConsoleW
GetNumberFormatA
VirtualUnlock
WritePrivateProfileStructA
FindAtomW
ReadConsoleW
MapViewOfFile
PostQueuedCompletionStatus
SetComputerNameA
GetConsoleCursorInfo
SetEnvironmentVariableA
EnumDateFormatsExA
GetBinaryTypeW
CancelIo
SleepEx
GetConsoleMode
GetStartupInfoA
FindNextFileA
UnhandledExceptionFilter
BuildCommDCBA
EnumResourceLanguagesW
GetThreadLocale
GetCPInfoExW
CreateEventW
FlushInstructionCache
SetTapePosition
GetStringTypeExA
GetCommandLineW
CopyFileExW
EnumCalendarInfoA
LocalShrink
FillConsoleOutputCharacterA
PrepareTape
WritePrivateProfileStringA
GetSystemInfo
SetThreadAffinityMask
GlobalAlloc
GetPrivateProfileStringW
GetProfileStringW
SetEnvironmentVariableW
SetStdHandle
GlobalHandle
InitializeCriticalSectionAndSpinCount
GetCommTimeouts
TransmitCommChar
VirtualAlloc
CreateFileW

user32

DdeAccessData
ChangeClipboardChain
CallNextHookEx
ToUnicodeEx
GetPropA
GetKeyNameTextW
GetMenu
DrawCaption
GetForegroundWindow
CopyRect
CreateDesktopA
ChangeDisplaySettingsW
BroadcastSystemMessage
GetLastActivePopup
SwapMouseButton
CreateWindowExW
AppendMenuA
DeleteMenu
WindowFromDC
CheckDlgButton
TranslateAccelerator
DialogBoxParamW
WaitForInputIdle
OemToCharW
GetMenuStringW
SystemParametersInfoA
SetUserObjectSecurity
DefDlgProcW
DdeQueryStringA
ValidateRect
GetMessageTime
EnumDisplayDevicesW
DdeImpersonateClient
FindWindowW
CallMsgFilterW
GetMessageW
GetWindowWord
IsWindowUnicode
InsertMenuW
RemovePropA
ToUnicode
DlgDirListComboBoxA
IsWindowEnabled
RegisterClassW
GetMenuItemRect
GetMenuContextHelpId
WINNLSEnableIME
WinHelpA
UnregisterHotKey
BlockInput
SetClassLongA
CreateCaret
LoadStringA
MoveWindow
SendMessageW
DialogBoxIndirectParamA
CascadeWindows
TrackMouseEvent
DdeQueryNextServer
GetScrollPos
GetDlgItem
FindWindowExW
ChangeMenuW
RegisterWindowMessageW
DragObject
GetClassInfoW
SetWindowRgn
DrawIcon
GetClipboardData

advapi32

RegDeleteValueW
CryptSetProviderA
GetFileSecurityA
FreeSid
SetNamedSecurityInfoW
GetTrusteeNameW
CryptSetProviderExA
GetNamedSecurityInfoExA
SetSecurityDescriptorGroup
TrusteeAccessToObjectA
CreatePrivateObjectSecurity
ObjectPrivilegeAuditAlarmW
SetPrivateObjectSecurity
GetSecurityInfoExA
CryptGetProvParam
AllocateLocallyUniqueId
RegSaveKeyW
GetLengthSid
EnumDependentServicesA
ReportEventW
CryptSetProviderW
BuildSecurityDescriptorW
EnumServicesStatusA
RegConnectRegistryA
GetNamedSecurityInfoA
SetTokenInformation
SetSecurityInfo
NotifyChangeEventLog
GetMultipleTrusteeW
CryptAcquireContextW
GetUserNameW
SetNamedSecurityInfoA
RegSetValueExA
SetSecurityDescriptorOwner
BackupEventLogW
RegUnLoadKeyW
BuildTrusteeWithNameA
GetServiceKeyNameA
CryptAcquireContextA
LogonUserW
InitializeSecurityDescriptor
LookupAccountSidW
OpenServiceW
CreateProcessAsUserW
GetSidSubAuthority
RegOpenKeyExW
IsValidAcl
ObjectCloseAuditAlarmW
AddAccessDeniedAce
CryptGetKeyParam
RegDeleteKeyA
CryptGetUserKey
CryptDestroyHash
GetSecurityInfoExW
ObjectPrivilegeAuditAlarmA
DuplicateTokenEx

shlwapi

PathGetDriveNumberA
StrDupA
PathSetDlgItemPathA
StrSpnA
GetMenuPosFromID
UrlIsW
SHDeleteKeyW
SHStrDupA
PathAddBackslashA
StrChrA
PathGetArgsA
SHDeleteValueW
PathIsRelativeA
UrlIsOpaqueW
StrNCatA
ColorAdjustLuma
SHEnumKeyExW
PathGetCharTypeW
PathSetDlgItemPathW
SHRegQueryInfoUSKeyA
UrlEscapeA
SHQueryInfoKeyW
PathRemoveFileSpecW
StrCSpnIW
SHRegDeleteUSValueW
ChrCmpIA
wnsprintfA
SHSkipJunction
StrPBrkA
SHEnumValueW
PathIsUNCA
SHSetValueW
StrRChrA
StrToIntA
StrRetToStrW
SHRegDeleteEmptyUSKeyA
PathAddExtensionW
StrRChrW
SHRegGetUSValueW
StrCatBuffW
SHRegOpenUSKeyW
StrCatBuffA
StrRChrIA
PathIsContentTypeW
SHRegDeleteUSValueA
UrlCreateFromPathA
SHRegDuplicateHKey
IntlStrEqWorkerA
PathFindExtensionW
PathRemoveArgsW
UrlGetLocationW
SHRegWriteUSValueA
PathIsContentTypeA
PathRemoveBackslashW
SHOpenRegStream2A
PathCommonPrefixW
HashData
PathMakeSystemFolderW
SHRegCloseUSKey
SHRegWriteUSValueW

ole32

OleInitialize
OleQueryCreateFromData
OleCreate
CLSIDFromString
DoDragDrop
CoUnmarshalInterface
CoFileTimeNow
CoInitialize
OleDestroyMenuDescriptor
CoInitializeEx
DllDebugObjectRPCHook
CoTreatAsClass
CoGetInstanceFromFile
UtConvertDvtd32toDvtd16
GetConvertStg
OleSaveToStream
OleDraw
CoUnmarshalHresult
WriteClassStg
CoResumeClassObjects
OleCreateFromDataEx
StgIsStorageFile
CoRevertToSelf
OleCreateLink
CoRegisterClassObject
RevokeDragDrop
CoReleaseMarshalData
ReadOleStg
CreateDataCache
StgGetIFillLockBytesOnFile
OleSave
CoDosDateTimeToFileTime
OleQueryLinkFromData
OleCreateFromFileEx
ReadFmtUserTypeStg
CoFreeUnusedLibraries
RegisterDragDrop
CoGetCurrentProcess
CoRegisterMallocSpy
OleCreateEx
OleConvertIStorageToOLESTREAMEx
OleRegEnumFormatEtc
MonikerRelativePathTo
CoCreateFreeThreadedMarshaler
CoIsHandlerConnected
CoQueryReleaseObject
CreateClassMoniker
OleRegGetMiscStatus
EnableHookObject
StringFromCLSID
GetDocumentBitStg

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

334574f1ca4a0cfb02e9bd82157f9f2c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

ole32

Sections

.text Size: 69KB - Virtual size: 69KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 16KB

.text
Size: 69KB - Virtual size: 69KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 16KB