7ad8fd03ad4c645e6b00d0aebf478d1f

Sharing

Copy URL Twitter E-mail

General

Target

7ad8fd03ad4c645e6b00d0aebf478d1f
Size

228KB
MD5

7ad8fd03ad4c645e6b00d0aebf478d1f
SHA1

4cae18985516ea0b35e59fb84aca48a9ecb9b55a
SHA256

eafd454b34468b2c5f5e599ceb6fdb6602ac5757bd300c976278a4bac7171683
SHA512

39418e5e2cd69faa1c4d930ec6de1543d3696d5a4aa198a9dd808cf29dccd9d20a20f118439bf6fd8d42a83a9672a427e49b7a455ad2b4f1e4bf826831d11735
SSDEEP

6144:x3UsSf7en/qM63iaMRc+owIG71fmcbOtnj/gE:JJiM5/c+owImmhj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ad8fd03ad4c645e6b00d0aebf478d1f

Files

7ad8fd03ad4c645e6b00d0aebf478d1f
.dll windows:4 windows x86 arch:x86

6ac7c03ae2fac32dd37bd229ec76faba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_Draw
ImageList_Add
ImageList_Write
ImageList_DrawEx
ImageList_Create

shlwapi

PathIsDirectoryA
SHStrDupA
SHQueryValueExA
SHGetValueA

user32

GetDlgItem
MessageBeep
EqualRect
UnhookWindowsHookEx
InflateRect
SetWindowTextA
SetTimer
SetScrollPos
FrameRect
ScreenToClient
LoadKeyboardLayoutA
CharLowerBuffA
CloseClipboard
GetForegroundWindow
LoadStringA
SetWindowsHookExA
PostMessageA
DrawEdge
DrawMenuBar
ReleaseCapture
SetFocus
EnableScrollBar
DeleteMenu
GetSysColor
DestroyIcon
GetSystemMenu
IntersectRect
GetMenuItemID

comdlg32

FindTextA
ChooseColorA
GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

shell32

SHGetSpecialFolderLocation

oleaut32

SafeArrayGetElement

gdi32

CreatePalette
GetObjectA
GetBitmapBits
GetCurrentPositionEx
GetDIBits
SelectPalette
CreateFontIndirectA

advapi32

RegQueryValueExA
RegLoadKeyA

kernel32

GetStdHandle
GetDateFormatA
CloseHandle
ExitProcess
GetCommandLineA
SetErrorMode
ExitThread
VirtualAlloc
GetDiskFreeSpaceA
GlobalAlloc
GetModuleHandleA
GetProcAddress
GetFileSize
GetLastError
MulDiv
LoadLibraryA

Sections

CODE
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 163KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ac7c03ae2fac32dd37bd229ec76faba

Headers

File Characteristics

Imports

comctl32

shlwapi

user32

comdlg32

shell32

oleaut32

gdi32

advapi32

kernel32

Sections

CODE Size: 40KB - Virtual size: 39KB

.rdata Size: 163KB - Virtual size: 290KB

.data Size: 13KB - Virtual size: 12KB

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: 1024B - Virtual size: 614B

CODE
Size: 40KB - Virtual size: 39KB

.rdata
Size: 163KB - Virtual size: 290KB

.data
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: 1024B - Virtual size: 614B