7e77faca95837a2808943525f3db1686

Sharing

Copy URL Twitter E-mail

General

Target

7e77faca95837a2808943525f3db1686
Size

1.6MB
MD5

7e77faca95837a2808943525f3db1686
SHA1

3d61ffbcb78a6fa4c45d2665cbe32df04f585d08
SHA256

dc40cec82b776f74ffb44803fd17251ec5dc8a4ad571d0e576b56d961192b91f
SHA512

ed858ade7c0b7e067349b0822a5cfa38dd6e7c0b744e2a810b24eaec3b6a179a8364dd8293faea236d1fa8cbda2be4a879ea463dfb4d7b3c6b140ba0b0266422
SSDEEP

24576:Q7wh8kaXqJRFpAMlL9OB5SEv84dlSdp6G10RkkNGiLWGM+8s13Vhau7v:9h8kZJRF7lTP4qwRt8iLWLFOF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e77faca95837a2808943525f3db1686

Files

7e77faca95837a2808943525f3db1686
.exe windows:4 windows x86 arch:x86

ab382dc7ab5fa568ff0e7a94664d0026

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
ExitProcess
LoadLibraryA
GetProcAddress
GetLastError
CloseHandle
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
RtlUnwind
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedExchange
VirtualQuery
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
SetStdHandle
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetSystemInfo

user32

MessageBoxA

engine

Shader_TRShader_Fog

Sections

.text
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 694KB - Virtual size: 694KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.axZ
Size: 793KB - Virtual size: 796KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.axL
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.axG
Size: 98KB - Virtual size: 98KB

Sharing

General

Malware Config

Signatures

Files

ab382dc7ab5fa568ff0e7a94664d0026

Headers

File Characteristics

Imports

kernel32

user32

engine

Sections

.text Size: - Virtual size: 1.1MB

.rdata Size: - Virtual size: 284KB

.data Size: - Virtual size: 229KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 694KB - Virtual size: 694KB

.reloc Size: - Virtual size: 118KB

.axZ Size: 793KB - Virtual size: 796KB

.axL Size: 64KB - Virtual size: 64KB

.axG Size: 98KB - Virtual size: 98KB

.text
Size: - Virtual size: 1.1MB

.rdata
Size: - Virtual size: 284KB

.data
Size: - Virtual size: 229KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 694KB - Virtual size: 694KB

.reloc
Size: - Virtual size: 118KB

.axZ
Size: 793KB - Virtual size: 796KB

.axL
Size: 64KB - Virtual size: 64KB

.axG
Size: 98KB - Virtual size: 98KB