7158fab291593339611d71b05dd07019

General

Target

7158fab291593339611d71b05dd07019
Size

36KB
MD5

7158fab291593339611d71b05dd07019
SHA1

43ac2abd4acb3703c00e5de174ba455c16055749
SHA256

67bf1074dec582ff36f20dbbc2bcd6b9cec5bfc628ae394a12d61c1e0ccdc407
SHA512

2a478b0aa02e5342390841aa0a4186076abbaad97b11ce13d4cffbc532bc198e9d8be98f3bfaa90e2744610eba30d8b2a540942f4b68897046b7e51ece90e2ab
SSDEEP

768:5snskE7iuPx2lhyq2GPgLa1EPVYdEAkcwIru:5UgsnyzLaOUs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7158fab291593339611d71b05dd07019

Files

7158fab291593339611d71b05dd07019
.exe windows:4 windows x86 arch:x86

a9bf3b6b97c9af36e7afc2d98ecd39dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
lstrcatA
lstrcpyA
CreateFileA
GetFileAttributesA
CreateDirectoryA
lstrlenA
ReadFile
GetVersionExA
Process32Next
Process32First
SetFilePointer
ExitThread
Sleep
DeleteFileA
TerminateThread
WaitForMultipleObjects
GetModuleFileNameA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CloseHandle
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
GetProcessHeap
GetFileType
CreateToolhelp32Snapshot
RemoveDirectoryA
ResetEvent
lstrcmpA
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
CreateEventA
SetEvent
CreateThread
WaitForSingleObject
GetTickCount
CreateProcessA
CompareStringA
SizeofResource
LoadResource
FindResourceA

user32

TranslateMessage
IsWindowEnabled
wsprintfA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
CreateWindowExA
GetWindowLongA

advapi32

RegNotifyChangeKeyValue
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA

wininet

InternetGetConnectedState

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9bf3b6b97c9af36e7afc2d98ecd39dd

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

iphlpapi

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 692B

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 692B

.rsrc
Size: 6KB - Virtual size: 6KB