7744682d7ad8b0a42dffdfa486b616fd

Sharing

Copy URL Twitter E-mail

General

Target

7744682d7ad8b0a42dffdfa486b616fd
Size

195KB
MD5

7744682d7ad8b0a42dffdfa486b616fd
SHA1

54ac5fbd6fb9cda8e12c15de82e4fb2194ac86ae
SHA256

f01e38904fb71a0302113c5c9a1b25513a1ee205023c7e955a42ae54a26657d0
SHA512

6c2582354b52fa5b463886cf1dee7f79e50cddc326857de1e4fcdf4799d48395c44e8fc80f57b5acf42da18dd8868ec487f7b6ef2725a8a903338baabed26d24
SSDEEP

3072:g9DclxLqixJccwOydc6Cs8lWu72pmbog1p1iBM4FPx0r3RN:cW1xJlwOIc6CNlWk2pmbtzMMAPxaN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7744682d7ad8b0a42dffdfa486b616fd

Files

7744682d7ad8b0a42dffdfa486b616fd
.exe windows:1 windows x86 arch:x86

0ff77b5735f227b47c0f3f18a37c08cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

AdjustTokenPrivileges
GetUserNameA
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA

kernel32

CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateProcessA
DeleteCriticalSection
DeleteFileA
DeleteFileW
DosDateTimeToFileTime
EnterCriticalSection
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThreadId
GetDiskFreeSpaceExA
GetDriveTypeA
GetEnvironmentStrings
GetExitCodeProcess
GetFileAttributesA
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GlobalAlloc
GlobalLock
GlobalMemoryStatus
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LocalFileTimeToFileTime
LocalFree
MoveFileA
MulDiv
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RtlUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEnvironmentVariableA
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetThreadLocale
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteFile

comdlg32

GetOpenFileNameA
GetSaveFileNameA

gdi32

CreateFontA
DeleteObject
GetDeviceCaps
GetStockObject

shell32

SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteA
Shell_NotifyIconA

user32

AppendMenuA
BeginPaint
CheckMenuItem
CloseClipboard
CreateMenu
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DrawMenuBar
EmptyClipboard
EnableMenuItem
EnableWindow
EndPaint
EnumThreadWindows
ExitWindowsEx
FindWindowA
GetActiveWindow
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetDesktopWindow
GetFocus
GetForegroundWindow
GetMenu
GetMenuState
GetMenuStringA
GetMessageA
GetParent
GetSystemMetrics
GetWindowLongA
GetWindowRect
GetWindowTextA
InvalidateRect
IsDialogMessageA
IsWindowEnabled
IsWindowVisible
KillTimer
LoadCursorA
LoadIconA
LoadImageA
MessageBoxA
ModifyMenuA
MoveWindow
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassExA
RegisterHotKey
RegisterWindowMessageA
ScreenToClient
SendMessageA
SetActiveWindow
SetClassLongA
SetClipboardData
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetTimer
SetWindowLongA
SetWindowPos
ShowWindow
TrackPopupMenu
TranslateMessage
UnregisterHotKey
UpdateWindow
VkKeyScanA
keybd_event
mouse_event
wsprintfA

winmm

mciSendStringA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Exports

Exports

@@Rb5_varsys@Finalize
@@Rb5_varsys@Initialize
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 151KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ff77b5735f227b47c0f3f18a37c08cc

Headers

File Characteristics

Imports

advapi32

kernel32

comdlg32

gdi32

shell32

user32

winmm

ole32

Exports

Exports

Sections

.text Size: 151KB - Virtual size: 152KB

.data Size: 18KB - Virtual size: 40KB

.tls Size: 512B - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.idata Size: 5KB - Virtual size: 8KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 12KB - Virtual size: 16KB

.text
Size: 151KB - Virtual size: 152KB

.data
Size: 18KB - Virtual size: 40KB

.tls
Size: 512B - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.idata
Size: 5KB - Virtual size: 8KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 12KB - Virtual size: 16KB