7e6ad5ef1a621796453184ba5bef9da6

Sharing

Copy URL Twitter E-mail

General

Target

7e6ad5ef1a621796453184ba5bef9da6
Size

132KB
MD5

7e6ad5ef1a621796453184ba5bef9da6
SHA1

0c091605760f81daf842b75e3761963fecbcd854
SHA256

79e24d30bd63f18d41afd1dba543b91420fe82c04f8c3b5ece305473270b95af
SHA512

a4ffab74231133a8657879c8e023217c661f718d720819d478f46a14100822d2efa8d94767205b3da40831c99963dd55fb5ee2209ce8609af5d0d7286d68997a
SSDEEP

3072:b9y8anqqm7oO0S4u7s1z2BLxcFkOh1CKIQy1:b9Jhqm7oOV4uHRO9I31

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e6ad5ef1a621796453184ba5bef9da6

Files

7e6ad5ef1a621796453184ba5bef9da6
.exe windows:4 windows x86 arch:x86

6e993b626db7fa161d4075277b70bdce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryInfoKeyA
RegQueryValueExW
RegReplaceKeyW
RegOpenKeyA
RegQueryInfoKeyW
RegEnumKeyA
RegCreateKeyExA
RegDeleteValueA
RegEnumValueW
RegFlushKey
RegEnumKeyExW
RegLoadKeyW
RegGetKeySecurity
RegOpenKeyExA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueW
RegOpenKeyExW
RegLoadKeyA
RegCreateKeyW
RegCreateKeyExW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegReplaceKeyA
RegQueryValueExA
RegQueryValueW
RegEnumKeyExA
RegQueryValueA
RegOpenKeyW
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyExW
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyW
RegEnumValueW
RegDeleteValueA
RegOpenKeyExA
RegDeleteValueW
RegEnumKeyW
RegQueryValueA
RegEnumKeyExA
RegEnumValueA
RegReplaceKeyW
RegReplaceKeyA
RegGetKeySecurity
RegQueryValueW
RegOpenKeyExW
RegLoadKeyA
RegQueryInfoKeyA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyW
RegQueryInfoKeyW
RegLoadKeyW
RegFlushKey

user32

GetWindowTextLengthA
DialogBoxParamA
InsertMenuA
LoadCursorA
GetCursor
CopyImage
AppendMenuW
GetDC
IsMenu
CopyIcon
IsWindow
DrawTextW
LoadMenuA
CalcMenuBar
DrawIcon
EndDialog
BlockInput
CloseWindow
AlignRects
DrawIconEx
GetDlgItem
GetFocus
CreateIcon
AppendMenuA
DialogBoxParamW
DrawTextA
CopyRect
GetWindowTextA
GetMenu

kernel32

CloseHandle
lstrcmpA
CloseHandle
GetDateFormatA
CloseHandle
GetFileSize
CloseHandle
GetModuleFileNameA
CloseHandle
GlobalFree
CloseHandle
lstrlenA
CloseHandle
FreeLibrary
CloseHandle
GetLocalTime
CloseHandle
lstrcpynA
CloseHandle

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdada
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edaaa
Size: 5KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bds
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.rsdc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e993b626db7fa161d4075277b70bdce

Headers

File Characteristics

Imports

advapi32

user32

kernel32

Sections

.text Size: 11KB - Virtual size: 10KB

.rdada Size: 104KB - Virtual size: 104KB

.edaaa Size: 5KB - Virtual size: 153KB

.bds Size: - Virtual size: 1KB

.rsdc Size: 7KB - Virtual size: 6KB

.text
Size: 11KB - Virtual size: 10KB

.rdada
Size: 104KB - Virtual size: 104KB

.edaaa
Size: 5KB - Virtual size: 153KB

.bds
Size: - Virtual size: 1KB

.rsdc
Size: 7KB - Virtual size: 6KB