7b2419e44319fb1203371272b4d75702

General

Target

7b2419e44319fb1203371272b4d75702
Size

76KB
MD5

7b2419e44319fb1203371272b4d75702
SHA1

c69d45d3d2f06c5397019d5c8a81718148d81208
SHA256

37fadf7183186255279fbeeb467770f37193af01c119f541ba8361717734968f
SHA512

9c7a5361e2426bdf0476a3e538a31bfc69861d5d2248fc804ef7b90fb271529dfc347ee37cca6c6f69853247ec1d17fff7e4edc39f6d7c77374952acfbf11ddf
SSDEEP

1536:fY2T1qDdxyAf6ax5Zw7BqKQ5MmWrfzWPVCedpyRsr:fY2TkvyApTZsn3mOasqpcsr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b2419e44319fb1203371272b4d75702

Files

7b2419e44319fb1203371272b4d75702
.exe windows:4 windows x86 arch:x86

26449526b6d9f2db74bf45c68f0fbc38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord2976
ord3830
ord3081
ord2985
ord3831
ord3079
ord4080
ord4622
ord4424
ord3825
ord3136
ord4465
ord3262
ord823
ord800
ord941
ord860
ord540
ord5731
ord1576
ord2512
ord4673
ord2554
ord4486
ord6375
ord4274
ord2982
ord3259
ord3147
ord5307
ord5714
ord5289
ord2725
ord4698
ord4079
ord3346
ord5302
ord5300
ord1089
ord2396
ord5199
ord825
ord3922
ord815
ord3738
ord561
ord1168

msvcrt

_initterm
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_stat
_mbschr
__CxxFrameHandler
printf
_setmbcp

kernel32

CreateMutexA
GetModuleFileNameA
CreateProcessA
CloseHandle
RemoveDirectoryA
ReleaseMutex
WaitForSingleObject
CreateDirectoryA
GetEnvironmentVariableA
FreeLibrary
SetEnvironmentVariableA
LoadLibraryA
GetProcAddress
DeleteFileA
FindFirstFileA
FindClose
GetStartupInfoA
GetModuleHandleA
GetLastError
lstrlenA

advapi32

RegDeleteKeyA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA

shell32

ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

26449526b6d9f2db74bf45c68f0fbc38

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

advapi32

shell32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.rrdata Size: 60KB - Virtual size: 60KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.rrdata
Size: 60KB - Virtual size: 60KB