7aac2a15f48236addd5e00dfb798c3a8

Sharing

Copy URL Twitter E-mail

General

Target

7aac2a15f48236addd5e00dfb798c3a8
Size

93KB
MD5

7aac2a15f48236addd5e00dfb798c3a8
SHA1

66a61df722bf48f607f2c0312d20308ac655ca5e
SHA256

b948beb567a196091ecb9f6c6cf40bd2db21c5e718ad9fda35e4e29c8c7ee601
SHA512

a4afa5e358a0ea09947d71d6905bd48dff1e8777d0b89cd87c918ee76dfafa0396b8c57fff2f716035a99dddcd2d1532c05ceab8815adcd9ca5ec56876e720fc
SSDEEP

1536:A/0xMxLnRJUAG6AmRt8m++RTHGYGOuG9xPCh+6GmciZ0diXvh9hIX:A/0SpIbK8m++RTHGDOuG9xPv6GmcizfK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7aac2a15f48236addd5e00dfb798c3a8

Files

7aac2a15f48236addd5e00dfb798c3a8
.exe windows:4 windows x86 arch:x86

9bbbc5849281f34b5b0c34add0a07f78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyA
RegQueryValueA
GetUserNameA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA
RegQueryInfoKeyA

comdlg32

GetSaveFileNameA
ChooseColorA
FindTextA
GetOpenFileNameA
FindTextA
ChooseColorA
GetSaveFileNameA

ole32

CoGetContextToken
CLSIDFromString
CoDisconnectObject
StgCreateDocfileOnILockBytes
CoFreeUnusedLibraries
CreateBindCtx
CoRegisterClassObject
OleCreateStaticFromData
CoGetObjectContext
CoCreateInstanceEx
OleCreateStaticFromData
CLSIDFromString
OleRun
StgCreateDocfileOnILockBytes

kernel32

lstrcatA
ExitThread
RaiseException
VirtualAllocEx
GetDiskFreeSpaceA
GetLastError
GetModuleHandleA
GetOEMCP
GetLocalTime
GetCPInfo
GetStringTypeW
VirtualAlloc
GetDateFormatA
HeapAlloc
GetStdHandle
LoadLibraryExA
WideCharToMultiByte
lstrcpynA
CloseHandle
GetProcAddress
ExitProcess
SetEndOfFile
LocalAlloc
GetUserDefaultLCID
SizeofResource

shlwapi

SHDeleteKeyA
SHDeleteValueA
PathIsDirectoryA
SHGetValueA
PathGetCharTypeA
SHQueryInfoKeyA
PathIsContentTypeA
SHQueryValueExA
PathFileExistsA
PathIsContentTypeA
SHQueryInfoKeyA
PathIsDirectoryA
SHDeleteKeyA
SHGetValueA
SHDeleteValueA
SHSetValueA
PathGetCharTypeA

gdi32

SelectPalette
CreatePenIndirect
GetClipBox
GetRgnBox
CreateCompatibleBitmap
SetTextColor
GetDIBits

oleaut32

SafeArrayPtrOfIndex
OleLoadPicture
VariantCopyInd
SafeArrayCreate
SafeArrayUnaccessData

msvcrt

memcmp
log10
atol
memcpy
mbstowcs
wcschr
memset
srand
exit
sin
abs
clock
log
ceil
wcsncmp
strlen
time
_acmdln
tolower
wcstol
memmove
fabs
calloc
strcmp
swprintf
pow
rand
sqrt
malloc
sprintf
strncmp
exp
wcscspn

version

GetFileVersionInfoSizeA
VerQueryValueA

user32

DefFrameProcA
CallWindowProcA
GetSysColor
GetWindow
GetMenu
GetSubMenu
ShowScrollBar
EqualRect
GetCursor
GetKeyState
CharLowerA
EndDeferWindowPos
SetWindowLongA
GetActiveWindow
GetPropA
DrawEdge
CharToOemA
DefWindowProcA
EnableScrollBar
GetClipboardData
CreatePopupMenu
GetSysColorBrush
GetDesktopWindow
CharLowerBuffA
GetIconInfo
GetScrollRange
GetFocus
IsChild
CreateMenu
EnumChildWindows
EnumWindows
BeginDeferWindowPos
FillRect
BeginPaint
GetKeyNameTextA
DrawTextA
DrawIconEx
DrawIcon
GetCursorPos
SystemParametersInfoA
GetMenuState
SetWindowPos
CallNextHookEx
MessageBoxA
CreateWindowExA
SetCursor
GetClassInfoA
GetWindowTextA
GetScrollInfo
TrackPopupMenu
IsWindowVisible
SetTimer
EndPaint
GetClassLongA
IsWindowEnabled
GetMessagePos
ShowWindow
ClientToScreen
DrawFrameControl
CreateIcon
DefMDIChildProcA
EnumThreadWindows
GetForegroundWindow
GetDCEx
GetDC
DispatchMessageA
DrawMenuBar
FrameRect
IsMenu
GetMenuItemCount
CharNextA
DispatchMessageW
EnableWindow
GetParent
GetMenuStringA
RegisterClassA
IsDialogMessageA
GetCapture
HideCaret
GetMenuItemInfoA
GetLastActivePopup
GetClientRect
EnableMenuItem
FindWindowA
DeferWindowPos
CheckMenuItem
SetWindowTextA
GetDlgItem
GetScrollPos
GetMenuItemID

shell32

SHGetSpecialFolderLocation
SHGetFileInfoA
SHFileOperationA
SHGetFolderPathA

comctl32

ImageList_Draw
ImageList_GetBkColor
ImageList_Read
ImageList_DrawEx
ImageList_Add
ImageList_DragShowNolock
ImageList_Write
ImageList_Destroy
ImageList_Remove
ImageList_Create

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9bbbc5849281f34b5b0c34add0a07f78

Headers

File Characteristics

Imports

advapi32

comdlg32

ole32

kernel32

shlwapi

gdi32

oleaut32

msvcrt

version

user32

shell32

comctl32

Sections

.text Size: 45KB - Virtual size: 45KB

.init Size: 42KB - Virtual size: 42KB

.edata Size: 512B - Virtual size: 85B

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 1KB

.text
Size: 45KB - Virtual size: 45KB

.init
Size: 42KB - Virtual size: 42KB

.edata
Size: 512B - Virtual size: 85B

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 1KB