0c7f1479a5b6e738f911c2a865250f74

Sharing

Copy URL Twitter E-mail

General

Target

0c7f1479a5b6e738f911c2a865250f74
Size

156KB
MD5

0c7f1479a5b6e738f911c2a865250f74
SHA1

1720670c891864bbf77185e50f5e801acce5c410
SHA256

cabfab17b7ebd3b7e9518b8092374e51f3e9ac14e581767172d6c48916c1f948
SHA512

5287733f4d428f590cfc665a6afbe8dcee86c6e7e1b9a762c56cc5fe42326e6db71eac3ff8ae60780b70785790fd68b24fa34da986a8dadf0e8ab38119f0a4cd
SSDEEP

3072:DETs9c6vscdJ0zhLJL5NUhNg8kGWREuelbpQY7:QTsPrwlp5NU0OoEP/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c7f1479a5b6e738f911c2a865250f74

Files

0c7f1479a5b6e738f911c2a865250f74
.exe windows:4 windows x86 arch:x86

4b03df1c88c6fc521121432b0e3508a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHSetValueA
SHQueryValueExA
PathIsContentTypeA
SHStrDupA
SHGetValueA
PathGetCharTypeA
SHDeleteKeyA
PathIsDirectoryA
SHQueryInfoKeyA
SHStrDupA
PathIsContentTypeA
SHQueryValueExA
SHGetValueA
SHEnumValueA
PathGetCharTypeA
SHQueryInfoKeyA
PathFileExistsA
SHDeleteKeyA
SHQueryValueExA
PathIsDirectoryA
SHSetValueA
SHDeleteValueA
SHDeleteValueA
PathIsContentTypeA
SHSetValueA
SHEnumValueA
PathIsDirectoryA
SHStrDupA
PathFileExistsA
SHQueryInfoKeyA
PathGetCharTypeA
PathFileExistsA
SHQueryValueExA
SHEnumValueA
SHStrDupA
PathIsContentTypeA
PathIsDirectoryA

advapi32

GetLengthSid
RegCreateKeyA
GetUserNameA
RegDeleteValueA
RegEnumValueA

msvcrt

strlen
srand
atan
memcmp
acos
exit
srand
strlen
memmove
memset

kernel32

GetLastError
VirtualAlloc
CompareStringA
lstrlenA
CloseHandle
IsBadHugeReadPtr
ExitThread
LoadLibraryA
lstrlenW
GetModuleHandleW
CreateFileA
GetModuleHandleA
GetOEMCP
GetCommandLineW
Sleep
GetProcAddress
EnterCriticalSection
DeleteFileA
CreateEventA
CreateThread
IsBadReadPtr
DeleteCriticalSection
ExitProcess
GetCommandLineA
GetCommandLineW
VirtualFree
IsBadReadPtr

user32

GetWindowPlacement
GetForegroundWindow
IsWindowVisible
GetWindowTextA
InsertMenuItemA
MapVirtualKeyA
GetWindowThreadProcessId
GetWindowRect
IntersectRect
InflateRect
LoadBitmapA
InvalidateRect
LoadKeyboardLayoutA
IsDialogMessageW
IsRectEmpty
IsWindow
GetWindowPlacement
MessageBoxA
OemToCharA
InsertMenuA
MapWindowPoints
LoadIconA
LoadStringA
LoadCursorA
KillTimer
IsDialogMessageA
IsChild
IsWindowEnabled
IsZoomed
IsIconic
IsWindowUnicode
MessageBeep

ole32

CoReleaseMarshalData
CLSIDFromString
GetHGlobalFromStream
CoCreateFreeThreadedMarshaler
CoFreeUnusedLibraries
CoUnmarshalInterface
PropVariantClear

comctl32

ImageList_Destroy
ImageList_Write
ImageList_Create
ImageList_GetBkColor
ImageList_Add
ImageList_Draw
ImageList_Add
ImageList_DragShowNolock
ImageList_Read
ImageList_Create
ImageList_GetBkColor
ImageList_Destroy
ImageList_Draw
ImageList_DrawEx
ImageList_Write
ImageList_Draw
ImageList_Read
ImageList_Destroy
ImageList_Remove
ImageList_DragShowNolock
ImageList_Write
ImageList_Add
ImageList_Draw
ImageList_Create

shell32

SHFileOperationA
SHGetDiskFreeSpaceA
SHGetFileInfoA
DragQueryFileA
SHFileOperationA
SHGetFolderPathA
Shell_NotifyIconA
SHGetFileInfoA
SHGetFileInfoA
SHFileOperationA
DragQueryFileA
SHGetFolderPathA
SHGetSpecialFolderLocation

gdi32

SelectObject
GetBitmapBits
GetObjectA
SetBkMode
GetDIBColorTable
CreatePalette
SetTextColor
GetRgnBox
SetBkColor
GetCurrentPositionEx
CreateCompatibleDC
SaveDC
CreateDIBitmap
SetBkMode

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
FindTextA
ChooseColorA
FindTextA
GetOpenFileNameA
GetSaveFileNameA
FindTextA
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
ChooseColorA

oleaut32

SysAllocStringLen
SafeArrayGetElement
VariantCopyInd

version

VerQueryValueA
GetFileVersionInfoA
VerInstallFileA

Sections

CODE
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b03df1c88c6fc521121432b0e3508a1

Headers

File Characteristics

Imports

shlwapi

advapi32

msvcrt

kernel32

user32

ole32

comctl32

shell32

gdi32

comdlg32

oleaut32

version

Sections

CODE Size: 108KB - Virtual size: 105KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

DATA Size: 8KB - Virtual size: 7KB

.cdata Size: 8KB - Virtual size: 7KB

.fdata Size: 8KB - Virtual size: 5KB

.rsrc Size: 12KB - Virtual size: 8KB

CODE
Size: 108KB - Virtual size: 105KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

DATA
Size: 8KB - Virtual size: 7KB

.cdata
Size: 8KB - Virtual size: 7KB

.fdata
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 12KB - Virtual size: 8KB