7a9a24b9d1c52c5620e6d2f012a0fd74

Sharing

Copy URL

Twitter E-mail

General

Target

7a9a24b9d1c52c5620e6d2f012a0fd74
Size

416KB
MD5

7a9a24b9d1c52c5620e6d2f012a0fd74
SHA1

67a2007966c5fa00f153982343ab6c169114b2fb
SHA256

c6f7fe36da2b36e04f7b1405006602643774e544b94ec14080de52281692129b
SHA512

5e7ccdbc8baf37abc6ff3e1d72ac1ad7645eeeee44581c1327e72621a9efa318baa750b38bb711a83ecc0d9e51d25390142a52806eb5f34d92ea56aa3408a148
SSDEEP

6144:bkqbvaFG43aDn8dlHSKaEc/34svsJMiS0cdUeLpDebYSuyOB:bbvq/aDn8dl1c/uJMfLLsbduf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a9a24b9d1c52c5620e6d2f012a0fd74

Files

7a9a24b9d1c52c5620e6d2f012a0fd74
.exe windows:4 windows x86 arch:x86

922af3eb7059ae879cb3332983b53a8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

gdi32

CreateBrushIndirect
BitBlt
SelectObject
CopyEnhMetaFileA
GetCurrentPositionEx
GetPaletteEntries
CreateBitmap

kernel32

RaiseException
SizeofResource
LocalReAlloc
HeapDestroy
IsBadHugeReadPtr
IsBadReadPtr
lstrcpyA
LoadLibraryExA
SetThreadLocale
WideCharToMultiByte
lstrcpynA
GetCommandLineW
SetHandleCount
WriteFile
ReadFile
GetModuleHandleA
lstrcmpA
ExitThread
lstrcmpiA
VirtualAlloc
ResetEvent
LocalFree
SetLastError
MulDiv
ExitProcess
VirtualFree
GetACP
MoveFileExA
SetFilePointer
lstrlenA
MoveFileA
GetProcAddress
VirtualQuery
LocalAlloc
VirtualAllocEx
GetLastError
WaitForSingleObject

user32

IsIconic
GetKeyNameTextA
GetWindowTextA
GetPropA
IntersectRect
GetFocus
GetWindowRect
GetSysColor
InsertMenuA
GetMenuState
IsZoomed
GetDC
GetWindowThreadProcessId
GetParent
IsWindow
GetTopWindow
InsertMenuItemA
GetMenuItemInfoA
IsWindowVisible
GetWindowDC
GetMenu
GetClassNameA
GetKeyState
GetScrollRange
GetMessagePos

Sections

CODE
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES63
Size: 1024B - Virtual size: 945B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES11
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES77
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES14
Size: 1024B - Virtual size: 841B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES41
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES48
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES46
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES94
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

922af3eb7059ae879cb3332983b53a8c

Headers

File Characteristics

Imports

gdi32

kernel32

user32

Sections

CODE Size: 72KB - Virtual size: 72KB

.data Size: 329KB - Virtual size: 328KB

.RES63 Size: 1024B - Virtual size: 945B

.RES11 Size: 3KB - Virtual size: 2KB

.RES77 Size: 2KB - Virtual size: 1KB

.RES14 Size: 1024B - Virtual size: 841B

.RES41 Size: 1KB - Virtual size: 1KB

.RES48 Size: 1KB - Virtual size: 1KB

.RES46 Size: 1024B - Virtual size: 652B

.RES94 Size: 512B - Virtual size: 385B

.rsrc Size: 2KB - Virtual size: 2KB

CODE
Size: 72KB - Virtual size: 72KB

.data
Size: 329KB - Virtual size: 328KB

.RES63
Size: 1024B - Virtual size: 945B

.RES11
Size: 3KB - Virtual size: 2KB

.RES77
Size: 2KB - Virtual size: 1KB

.RES14
Size: 1024B - Virtual size: 841B

.RES41
Size: 1KB - Virtual size: 1KB

.RES48
Size: 1KB - Virtual size: 1KB

.RES46
Size: 1024B - Virtual size: 652B

.RES94
Size: 512B - Virtual size: 385B

.rsrc
Size: 2KB - Virtual size: 2KB