7760e52f091a646e1baf925e9d0d7d65

Sharing

Copy URL

Twitter E-mail

General

Target

7760e52f091a646e1baf925e9d0d7d65
Size

140KB
MD5

7760e52f091a646e1baf925e9d0d7d65
SHA1

2970f8605aa74db32cb9b4a0e32f694d09cfb139
SHA256

dd5fb87ac66c0b1150a5e14595db64d4c419aa23c6d023c58199ab43cb4db27b
SHA512

1d99d9e20089bcc48a9d036c102bdcd6c126ef6447e15fbd503bf41c4464ed37e7d7e783367cead57bdb9a37df48bee3c1f7af25e552a98aa3ba7c1e700ae702
SSDEEP

3072:7W1LGFCJlftm6MaSp3j4Cjy3GHmDqB3yuv9o:GLtrftm6Cd0GHGqhyuv9o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7760e52f091a646e1baf925e9d0d7d65

Files

7760e52f091a646e1baf925e9d0d7d65
.exe windows:4 windows x86 arch:x86

f523d4867fc83215d5e1cf9fc29a7696

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetLocalTime
GetTempPathA
GetComputerNameW
ReadConsoleOutputAttribute
SetTimeZoneInformation
GetSystemDirectoryA
SetConsoleTextAttribute
DeleteAtom
HeapAlloc
GetConsoleAliasExesLengthA
GetProcessWorkingSetSize
WritePrivateProfileStringW
DefineDosDeviceA
GetVersionExW
_lcreat
GlobalHandle
GetTapeParameters
Beep
MulDiv
SetConsoleFont
ReadDirectoryChangesW
CloseConsoleHandle
MultiByteToWideChar
HeapDestroy
LocalSize
GetProcessVersion
GetEnvironmentStringsW
VirtualAlloc
lstrcpy
GlobalFindAtomW
SetTapePosition
InterlockedExchange
GetVolumeInformationA
FillConsoleOutputAttribute
ConvertThreadToFiber

user32

ModifyMenuA
DdeDisconnect
RemoveMenu
CheckDlgButton
GetMessageExtraInfo
wvsprintfW
LoadIconA
ToAsciiEx
PrivateExtractIconsW
MessageBoxExW
SetDlgItemTextW

gdi32

SetPixel
Escape
GdiInitSpool
ModifyWorldTransform
GetWorldTransform
GdiSetBatchLimit
FillRgn
GetTextFaceA
SetBitmapDimensionEx
CreateDCW
OffsetRgn
CreateRectRgnIndirect
GetCharABCWidthsW

ole32

OleCreateFromFile
GetHGlobalFromStream
OleCreateMenuDescriptor
HGLOBAL_UserSize
StgCreateDocfileOnILockBytes
CoIsHandlerConnected
CoGetCurrentLogicalThreadId
WdtpInterfacePointer_UserFree
StgGetIFillLockBytesOnFile
OleRun
OleCreateFromFileEx
HACCEL_UserMarshal
UtConvertDvtd32toDvtd16
RegisterDragDrop
HBITMAP_UserMarshal
CoUnmarshalInterface
DllDebugObjectRPCHook
OleQueryLinkFromData
SNB_UserUnmarshal
OleSaveToStream
OleDuplicateData
CLIPFORMAT_UserMarshal
OleUninitialize
OleGetIconOfClass
IsValidPtrOut
OleRegGetMiscStatus
HBRUSH_UserMarshal
HBITMAP_UserSize
CreateErrorInfo
GetConvertStg
CoInitializeEx
CoDosDateTimeToFileTime

Sections

.data
Size: 101KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 27KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f523d4867fc83215d5e1cf9fc29a7696

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Sections

.data Size: 101KB - Virtual size: 148KB

.text Size: 27KB - Virtual size: 76KB

.idata Size: 5KB - Virtual size: 20KB

BSS Size: 6KB - Virtual size: 8KB

.data
Size: 101KB - Virtual size: 148KB

.text
Size: 27KB - Virtual size: 76KB

.idata
Size: 5KB - Virtual size: 20KB

BSS
Size: 6KB - Virtual size: 8KB