7041a78561f46b06292ce1ed60838153

General

Target

7041a78561f46b06292ce1ed60838153
Size

376KB
MD5

7041a78561f46b06292ce1ed60838153
SHA1

7795542b63807d30f63cfb34b9023562b05daf54
SHA256

37b833740b53bdad1c35353238f5d0679ceb34b91a2203afde74b824404fc6bd
SHA512

73c42a4d5b426d055764461deb00ba0e6fe613d3decef21dad7faac8c196e2782da2a9242163d073ec0a5c42275eb317c8b6b0a117f673c3af739d2dbd403f70
SSDEEP

6144:KWUhwnx2y02mA1L+qnKzk7Bh+NQIuCry+vPflr91DNJ4pp:KWesP0QRozqBh2uCry+p9tG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7041a78561f46b06292ce1ed60838153

Files

7041a78561f46b06292ce1ed60838153
.exe windows:4 windows x86 arch:x86

202f9b8f50ffd3d5a5ffccd658481aa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
VirtualUnlock
GetModuleHandleA
VirtualAlloc
GetProcAddress
VirtualFree
GetProcessHeap
GetLocalTime
GetLastError
InterlockedExchange
GetSystemInfo
VirtualProtect
GetLocaleInfoA
HeapSize
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
RtlUnwind
VirtualQuery

user32

GetDesktopWindow

winmm

joySetCapture

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 320KB - Virtual size: 699KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

202f9b8f50ffd3d5a5ffccd658481aa8

Headers

File Characteristics

Imports

kernel32

user32

winmm

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 320KB - Virtual size: 699KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 320KB - Virtual size: 699KB

.rsrc
Size: 8KB - Virtual size: 7KB