7b68e849afbe42d2cde7fab8e11d747c

General

Target

7b68e849afbe42d2cde7fab8e11d747c
Size

3.4MB
MD5

7b68e849afbe42d2cde7fab8e11d747c
SHA1

e1089185134c93cb3aa688c12338e483de2a3955
SHA256

ed1a5c685b9a0677ef55d8751a58dcec4c30267b0374923eb012a0af168b792f
SHA512

6440f487e88874e0796e9f72942914992dd74097b980e46f1f72e8d86b34820134912d08effe21de6b278f89b250ac5010c2dd3daa7d0c92c43face27d9ef364
SSDEEP

98304:VTsHu0FPlZiv+KkHDh3enUa33bFLaONxUrd5b:uO0FPlEGKkl3enJ335aONxyT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b68e849afbe42d2cde7fab8e11d747c

Files

7b68e849afbe42d2cde7fab8e11d747c
.exe windows:4 windows x86 arch:x86

227e5c991ed7c2c78ea0e0301ea67973

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetModuleHandleW
GetProcAddress
CloseHandle
GetTickCount
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
WaitForSingleObject
GetProcessHeap
ExitProcess
GetStdHandle
GetCommandLineW
SetEvent
FormatMessageW
TlsGetValue
GetModuleHandleA
InitializeCriticalSection
HeapReAlloc
GetConsoleMode
TlsAlloc
HeapSetInformation
HeapSize
LoadLibraryW
GetCPInfo
TlsFree
CompareStringW
GetStringTypeW
RtlUnwind
LCMapStringW
GetModuleFileNameA
GetOEMCP
GetEnvironmentStringsW
SetStdHandle
FreeEnvironmentStringsW
IsValidCodePage
DeleteFileW
VirtualAlloc
GetConsoleCP
LocalAlloc
DecodePointer
ResetEvent
GetVersionExW
VirtualFree
LoadLibraryA
GetModuleHandleExW
GetLocaleInfoW
CreateDirectoryW
GetFullPathNameW
LoadResource
GetExitCodeProcess
ExpandEnvironmentStringsW

user32

DispatchMessageW
ReleaseDC
DefWindowProcW
MessageBoxW
GetWindowLongW
GetMessageW
GetDC
SendMessageW
GetClientRect
GetParent
SetWindowTextW
SetFocus
PeekMessageW
EndPaint
BeginPaint
SetCursor
KillTimer
InvalidateRect
RegisterClassW
EnableMenuItem
UpdateWindow
GetKeyState
CharUpperW
ClientToScreen

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

227e5c991ed7c2c78ea0e0301ea67973

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 6KB - Virtual size: 6KB

.idata Size: 2KB - Virtual size: 1KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.data Size: - Virtual size: 612KB

.text
Size: 6KB - Virtual size: 6KB

.idata
Size: 2KB - Virtual size: 1KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: - Virtual size: 612KB