07e9a6e793a83874ba57f4858c508ef1

General

Target

07e9a6e793a83874ba57f4858c508ef1
Size

665KB
MD5

07e9a6e793a83874ba57f4858c508ef1
SHA1

f0aebaac59ea38ac1d3e6fb05da545ed8ef5e7e0
SHA256

774b4e9d8ec713c5b5be373dcf3bf92a0a945207003a1816927411813ab4e2ae
SHA512

960d84784a3a8e0035ad5f49562411a52ef5a0acb67347a906dc8cd641054a4b6a5c7aad48b1d2f77a28606fd80dd66a6bec06eb7d15bb26331327eb4b9bab7a
SSDEEP

12288:IlM4DAgx06nclC/uuSTXLUdck1dFlj5sP638y6Seg6zQPknP+PeUI30mrgRdwp:IlTEg+6cllui7Udck1dFoPvSeg6zYGPN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07e9a6e793a83874ba57f4858c508ef1

Files

07e9a6e793a83874ba57f4858c508ef1
.exe windows:5 windows x86 arch:x86

a7e144157d2653c6acf3e6eecaeb8248

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
SetCurrentDirectoryA
SetConsoleCP
GetStringTypeW
FlushFileBuffers
InterlockedCompareExchange
VirtualQuery
SetUnhandledExceptionFilter
GetOEMCP
GetCurrentThreadId
CreateFileA
VirtualProtect
SetLastError
GetModuleHandleW
GetModuleHandleA
GetVersion
MultiByteToWideChar
GetCurrentProcess
SetStdHandle
FindNextFileW
GetStartupInfoA
FindFirstFileW
LockFile
GetACP
HeapAlloc
TlsFree
SystemTimeToFileTime
GetCommandLineA
LCMapStringW
GetDateFormatA
MulDiv
SetEnvironmentVariableA
WriteConsoleW
UnlockFile
GetProcAddress
ExitProcess
VirtualFree
HeapDestroy
GetProcessHeap
GetFileType
LoadResource
GlobalFree
InterlockedIncrement
QueryPerformanceCounter
GetModuleFileNameW
WideCharToMultiByte
Sleep
HeapSize
LoadLibraryExA
UnhandledExceptionFilter
TlsSetValue
LocalAlloc
FileTimeToSystemTime
SizeofResource

user32

EnableWindow
EndPaint
DialogBoxParamW
GetForegroundWindow
IsWindowEnabled
GetDC
InvalidateRect
PostMessageA
GetClientRect
AdjustWindowRectEx
GetDlgCtrlID
SetWindowsHookExW
SetDlgItemTextA
GetPropA
GetWindowLongA
DestroyIcon
FindWindowA
PostThreadMessageW
CallWindowProcA

msvcrt

?terminate@@YAXXZ
wcsrchr
_wcsnicmp
__set_app_type
memcpy
memmove
??3@YAXPAX@Z

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a7e144157d2653c6acf3e6eecaeb8248

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 39KB - Virtual size: 126KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 39KB - Virtual size: 126KB