7811374fc410346bbfb0b233138843d2

Sharing

Copy URL Twitter E-mail

General

Target

7811374fc410346bbfb0b233138843d2
Size

120KB
MD5

7811374fc410346bbfb0b233138843d2
SHA1

4e3bf3538ad38904c957ff905a8c01536cecd401
SHA256

a791a3c436038092938fcab194ed47c33afc6ef4e1482bdc1f3982143d7c416c
SHA512

7fddf2246062cf480d12695fa8d713ac149f4000ccdb84f3737cc000dbf025d98d056185b8201881b54cd23e8b10d43d2756354e7b21926c82cabffe8960b2c3
SSDEEP

3072:wtNHc6cHgFtQdyzuvtm7qNPcDeXJewLJVqs6LE:wfHc6cH6iEGPGEJesJVqsn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7811374fc410346bbfb0b233138843d2

Files

7811374fc410346bbfb0b233138843d2
.exe windows:4 windows x86 arch:x86

a6849149ae9663f377f3d5ff3a52731f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
GetTickCount
GetTempPathA
lstrcmpiA
SetLastError
SetFileTime
SetFilePointer
CreateThread
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
GetStartupInfoA
SizeofResource
WriteFile
lstrlenA
CloseHandle
FreeResource
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
HeapFree
LoadLibraryA
GetProcAddress
lstrcmpA
GetLocalTime
GetModuleFileNameA
WinExec
CreateDirectoryA
CopyFileA
Sleep
lstrcpyA
lstrcatA
GetFileAttributesA
MoveFileA
SetFileAttributesA
DeleteFileA
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationA
ReadFile

user32

PostThreadMessageA
GetMessageA
wsprintfA
GetInputState

advapi32

CloseServiceHandle
GetUserNameA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA
OpenSCManagerA
StartServiceA
OpenServiceA
CreateServiceA

shell32

ShellExecuteA

msvcrt

strstr
_controlfp
__set_app_type
strcpy
strcat
sprintf
fopen
rand
srand
time
fclose
fputs
memcpy
memset
exit
_except_handler3
realloc
malloc
strlen
strchr
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

ws2_32

WSAStartup
gethostbyname
WSACleanup
gethostname

urlmon

URLDownloadToFileA

netapi32

NetUserGetLocalGroups
NetApiBufferFree

Sections

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6849149ae9663f377f3d5ff3a52731f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msvcrt

ws2_32

urlmon

netapi32

Sections

.data Size: 14KB - Virtual size: 14KB

.rsrc Size: 105KB - Virtual size: 104KB

.data
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 105KB - Virtual size: 104KB