7546d7ae7dbee255d7a9430fc2e45041

General

Target

7546d7ae7dbee255d7a9430fc2e45041
Size

414KB
MD5

7546d7ae7dbee255d7a9430fc2e45041
SHA1

0836b52ea0e7f5572e5b4ee7c70d58bfd5196373
SHA256

f1e5b89506506d940469b8ddf09b394844dc58fef18810037e4e4d2e5572bfc2
SHA512

c886c0a8dc1317ac9a05d4cd68a6ac074cfaa8d61313a684aa393c708e9795573002ed65e0eaf52ce55da7713dc64a2563a4e0c70943f045df6fe6680c8cdd5f
SSDEEP

12288:st1EVbounkPU7vdqvL+P2+qr1I3LZLZQT:sgFnMU4vL+M5CZLZQT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7546d7ae7dbee255d7a9430fc2e45041

Files

7546d7ae7dbee255d7a9430fc2e45041
.exe windows:4 windows x86 arch:x86

2004fb7f95f13d0f90b02df4b560cdc8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
VirtualAlloc
CloseHandle
Sleep
GetThreadPriority
GetProfileStringW
FindAtomW
SetUnhandledExceptionFilter
ChangeTimerQueueTimer
GetAtomNameA
GetSystemDefaultUILanguage
ord1
GetVersionExW
SetCommState
ExitProcess
_lclose
CreateEventW
GetTempPathA

msrepl40

ord2001
ord2042
ord2024
ord2041

rtutils

TraceDeregisterW
RouterLogEventStringA
TraceRegisterExA
RouterLogEventExW
LogEventW
TraceDumpExA
RouterLogEventDataA
RouterLogDeregisterW
LogEventA
TracePutsExA
RouterLogEventStringW
RouterLogRegisterA
LogErrorA
TracePrintfA
TraceDeregisterExA
TracePrintfExW
RouterLogDeregisterA
RouterLogEventW
TraceRegisterExW
LogErrorW

msvbvm60

__vbaForEachCollVar
ord690
_adj_fdiv_m32
__vbaVarDup
__vbaAptOffset
ord304
__vbaChkstk
ord520
_CItan
_allmul
ord709
__vbaGosubFree
_adj_fdiv_m32i
__vbaFreeStrList
ord647
__vbaForEachCollObj
__vbaFpR8
ord102
__vbaFileOpen
ord711

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textbs
Size: 381KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2004fb7f95f13d0f90b02df4b560cdc8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msrepl40

rtutils

msvbvm60

Sections

.text Size: 12KB - Virtual size: 11KB

.CRT Size: - Virtual size: 22KB

.textbs Size: 381KB - Virtual size: 477KB

.rsrc Size: 19KB - Virtual size: 19KB

.text
Size: 12KB - Virtual size: 11KB

.CRT
Size: - Virtual size: 22KB

.textbs
Size: 381KB - Virtual size: 477KB

.rsrc
Size: 19KB - Virtual size: 19KB