07e0bb0da2b69c396125decc433b3986

Sharing

Copy URL

Twitter E-mail

General

Target

07e0bb0da2b69c396125decc433b3986
Size

49KB
MD5

07e0bb0da2b69c396125decc433b3986
SHA1

36dcf7c13f9617092c5326f949d152f41dd71a62
SHA256

e7081c343945ae657cd3f08f9bc8588e38688b541fb901c152dd48b387ea4ceb
SHA512

7825ca5dddb9ac7151aa289f2776c5c0edffa9b10f313c5ce34afc1f0b85f5bfcf904141c913bdba9303f618fdc986690e0c9073f6b9045f4933ed7f312fb907
SSDEEP

768:if9q2OIBQAeqFh9DMrA43GE2J1vuJ6aubnLjaO/+LYFBaolGR30701KH08p:ilROISjYXDMPWEesvu3jaWeYFBTyx1K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07e0bb0da2b69c396125decc433b3986

Files

07e0bb0da2b69c396125decc433b3986
.exe windows:4 windows x86 arch:x86

20e907236b0aa127bbf269dd0daec5b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomW
AllocConsole
ClearCommError
CloseHandle
ConvertDefaultLocale
ConvertThreadToFiber
CreateDirectoryA
CreateFileW
CreateIoCompletionPort
CreateMutexA
CreateWaitableTimerA
DosDateTimeToFileTime
EnumCalendarInfoA
EnumSystemCodePagesW
ExitProcess
FillConsoleOutputCharacterA
FindAtomA
FindAtomW
FindCloseChangeNotification
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FormatMessageW
GetAtomNameW
GetCPInfo
GetCPInfoExW
GetCommandLineW
GetConsoleAliasExesLengthW
GetConsoleCP
GetConsoleCommandHistoryW
GetConsoleCommandHistoryLengthW
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetDefaultCommConfigW
GetFileTime
GetLastError
GetLocalTime
GetModuleHandleW
GetNumberFormatW
GetPrivateProfileStringA
GetQueuedCompletionStatus
GetStartupInfoW
GetSystemDirectoryA
GetSystemInfo
GetSystemTime
GetTempPathA
GetThreadLocale
GetUserDefaultLangID
GetVersion
GlobalAlloc
GlobalFindAtomA
GlobalGetAtomNameA
GlobalWire
Heap32ListNext
IsBadCodePtr
LoadLibraryW
LocalFlags
LockResource
MoveFileExA
MoveFileWithProgressA
MulDiv
ReadConsoleInputA
ReadConsoleOutputAttribute
ReadConsoleOutputCharacterA
RtlZeroMemory
ScrollConsoleScreenBufferW
SearchPathW
SetConsoleCtrlHandler
SetConsoleTitleA
SetLastError
SetSystemTime
SetUnhandledExceptionFilter
VerLanguageNameA
VerLanguageNameW
VirtualProtect
WaitForDebugEvent
WaitForSingleObject
_lopen
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW

user32

ActivateKeyboardLayout
AdjustWindowRectEx
CharPrevW
CharUpperA
CharUpperW
CopyIcon
CreateIcon
DdeCmpStringHandles
DdeCreateDataHandle
DdeInitializeA
DestroyIcon
DlgDirSelectComboBoxExA
DragObject
DrawFrame
DrawTextExW
EnumChildWindows
EnumDesktopsA
EnumDisplaySettingsW
EnumWindowStationsW
FindWindowW
FrameRect
GetClassLongA
GetClipCursor
GetCursor
GetCursorInfo
GetDCEx
GetDesktopWindow
GetDlgItemInt
GetFocus
GetForegroundWindow
GetIconInfo
GetMenu
GetMenuDefaultItem
GetMenuItemID
GetMonitorInfoA
GetOpenClipboardWindow
GetParent
GetSystemMetrics
GetWindowDC
GetWindowLongW
GrayStringA
GrayStringW
HiliteMenuItem
InvalidateRgn
InvertRect
IsCharAlphaNumericA
IsCharLowerA
IsDialogMessageA
LoadCursorW
MessageBoxIndirectA
ModifyMenuA
OpenClipboard
PaintDesktop
PostThreadMessageW
RealGetWindowClassW
RegisterClipboardFormatW
ReuseDDElParam
ScrollWindow
SendDlgItemMessageW
SetMenu
SetRect
SetScrollPos
SetUserObjectInformationA
SetUserObjectSecurity
ToUnicode
TrackMouseEvent
WaitForInputIdle
WaitMessage
wsprintfW

gdi32

CombineRgn
CreateDCA
CreateEllipticRgn
CreateFontIndirectA
CreateRectRgnIndirect
CreateScalableFontResourceW
DeleteDC
Ellipse
EnumFontFamiliesA
EnumICMProfilesW
FillRgn
FrameRgn
GdiComment
GdiGetBatchLimit
GetBitmapBits
GetBkColor
GetBkMode
GetBoundsRect
GetClipBox
GetClipRgn
GetColorSpace
GetCurrentObject
GetLogColorSpaceW
GetMapMode
GetNearestPaletteIndex
GetObjectA
GetObjectType
GetPixel
GetSystemPaletteUse
GetTextCharset
IntersectClipRect
OffsetRgn
Polygon
PtInRegion
SetBitmapDimensionEx
SetColorAdjustment
SetROP2
SetTextJustification
StartDocA
StrokePath
TextOutW

msvcrt

_clearfp
_copysign
_fgetchar
_flsbuf
_flushall
_getdrives
_heapset
_outpd
_pctype
_snprintf
_spawnle
_spawnvpe
_splitpath
_strerror
_strncoll
_strnicoll
_waccess
_wcmdln
_wcsdup
_wcsnset
_wexecle
_winver
fopen
free
islower
isupper
iswalnum
iswpunct
iswupper
mbtowc
putwchar
realloc
strtoul
strxfrm
swscanf
vfprintf
wcscmp
wcscoll
wcsncat
wcsncpy

Sections

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dEpu
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Vspd
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20e907236b0aa127bbf269dd0daec5b9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

Sections

.text Size: 5KB - Virtual size: 6KB

.data Size: 34KB - Virtual size: 38KB

.dEpu Size: 5KB - Virtual size: 14KB

.Vspd Size: 2KB - Virtual size: 7KB

.reloc Size: 1024B - Virtual size: 7KB

.text
Size: 5KB - Virtual size: 6KB

.data
Size: 34KB - Virtual size: 38KB

.dEpu
Size: 5KB - Virtual size: 14KB

.Vspd
Size: 2KB - Virtual size: 7KB

.reloc
Size: 1024B - Virtual size: 7KB