7337d32ddb9648423158d77d98428d66

Sharing

Copy URL Twitter E-mail

General

Target

7337d32ddb9648423158d77d98428d66
Size

104KB
MD5

7337d32ddb9648423158d77d98428d66
SHA1

a243079975612003bd49c3776b4ffed022adba45
SHA256

90ee70c5baa05707c27bd1e96f4fed0862cf0c391170d46c0806da3e10e5561c
SHA512

64f96ce3cf41b48101c98f4dfaf7702b1fa3e67170a75bbd903097d5fb9f5ef4f3714be34c6fac28c41eed0247660a2fc24406d6cfe4a139474ecee389858a0a
SSDEEP

768:6GNHJAlSCygvGoKAfaRw/LSWh1BrDqnl3dpJDSmanvJXI3Rs1P+Jn3A:6GBIYgvGDAfaRwLbBHQSmQv2YPt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7337d32ddb9648423158d77d98428d66

Files

7337d32ddb9648423158d77d98428d66
.exe windows:4 windows x86 arch:x86

f32ed40b3b80a6444939fbfc03e574c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcscpy
strncmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
fopen
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
strlen
memcmp
strcmp
fclose
fgets
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
strcpy
__setusermatherr
_chkesp

kernel32

GetModuleHandleA
WideCharToMultiByte
MultiByteToWideChar
CreateProcessA
GetWindowsDirectoryA
GetStartupInfoA

user32

LoadCursorA
LoadIconA
PostMessageA
CreateWindowExA
EndDialog
wsprintfA
keybd_event
DefWindowProcA
DialogBoxParamA
KillTimer
RegisterClassExA
BringWindowToTop
PostQuitMessage
SetTimer
SetWindowTextA
GetDlgItem
FindWindowA
MessageBoxA
LoadAcceleratorsA
GetMessageA
SetForegroundWindow
LoadStringA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance

oleaut32

OleCreatePropertyFrame
SysFreeString

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ttzltrh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f32ed40b3b80a6444939fbfc03e574c9

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 4KB - Virtual size: 840B

.data Size: 24KB - Virtual size: 20KB

.idata Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 32KB - Virtual size: 32KB

ttzltrh Size: - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 4KB - Virtual size: 840B

.data
Size: 24KB - Virtual size: 20KB

.idata
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 32KB - Virtual size: 32KB

ttzltrh
Size: - Virtual size: 4KB