7167b888f838bca65cec8e20f9bb47d5

General

Target

7167b888f838bca65cec8e20f9bb47d5
Size

174KB
MD5

7167b888f838bca65cec8e20f9bb47d5
SHA1

5067c5169618af915fd61eb5058b7fb0d8dcf1a1
SHA256

b1b7be57820f34db40a01cefd96b126533d830ba01898fe42652428da37bbc66
SHA512

aea9b86d3f58400db600b4dd2e81e71c3568e941c8c9a026393378dea5117c18a93c1c70fd291b7ba34945bc974c635484cc19bb6a77c0af8662829815f283e2
SSDEEP

3072:gczGLcTDbYkHRGLdqbIngTSLTVuCTnztmmJ67l8fR/0Q89Ru5Ze:gkGgzH4Lw8ngTS34CTzqI0lRu5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7167b888f838bca65cec8e20f9bb47d5

Files

7167b888f838bca65cec8e20f9bb47d5
.exe windows:4 windows x86 arch:x86

8490f963a114b014fe2d4badb2744df1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyA
RegQueryValueA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

kernel32

AddAtomW
ReadFile
CreateFileW
CopyFileA
GetModuleFileNameW
GlobalLock
CreateFileA
VirtualFree
GetTickCount
DeleteFileA
GetSystemTimeAsFileTime
ReleaseMutex
LocalAlloc
VirtualAlloc
CreateMutexA
InterlockedDecrement
GlobalUnlock
WideCharToMultiByte
GetSystemTime
GetCurrentProcessId
GetCurrentThreadId
EnumResourceNamesA
InterlockedIncrement
lstrlenA
LocalFree
GetVolumeInformationA
SetFileAttributesA
InitializeCriticalSection
GetModuleFileNameA
DeviceIoControl
GetFileSize
CheckNameLegalDOS8Dot3W
Sleep
GetFileAttributesA
CloseHandle
SetFilePointer
GetTempFileNameA
WaitForSingleObject
DeleteCriticalSection
QueryPerformanceCounter
GetLastError
MultiByteToWideChar
GetVersionExA
GlobalFree
GetTempPathA
CreateDirectoryA
DisableThreadLibraryCalls
FreeLibrary

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

lz32

LZClose
LZCopy
LZOpenFileA

Sections

.text
Size: 94KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8490f963a114b014fe2d4badb2744df1

Headers

File Characteristics

Imports

advapi32

kernel32

setupapi

lz32

Sections

.text Size: 94KB - Virtual size: 238KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 76KB - Virtual size: 75KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 94KB - Virtual size: 238KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 76KB - Virtual size: 75KB

.rsrc
Size: 512B - Virtual size: 4KB