7b70ccfdf6fd2dbcdd13353481efb4c8

Sharing

Copy URL

Twitter E-mail

General

Target

7b70ccfdf6fd2dbcdd13353481efb4c8
Size

1.3MB
MD5

7b70ccfdf6fd2dbcdd13353481efb4c8
SHA1

3632c10e9f575a5407944ea3fa05e915ee46f509
SHA256

ee924bcac441d488883f53fc0e13532e6c1d97fb6046358eecc9443fcd083077
SHA512

1c09be0b2cccd27a871104a1427bea58027c381de80f64c5389e8f4d0853f43640f17fa48210278a3a107dd504edb2f1e6c2ebb68ae69ca8cf8bf8ad9b9ff14a
SSDEEP

24576:L18h1leOx1r1C6B1z1mF1618wldJWS/edCwdF8A9PdJkP:J8HleO3pC8xoKB6/AWPdJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b70ccfdf6fd2dbcdd13353481efb4c8

Files

7b70ccfdf6fd2dbcdd13353481efb4c8
.exe windows:5 windows x86 arch:x86

b6477db399ec584521b4ea9c600c9ccd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msacm32

acmStreamClose

sqlite3

sqlite3_extended_errcode

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
__setusermatherr

kernel32

GetStartupInfoA
LoadLibraryA
LeaveCriticalSection
ExitProcess
GetTickCount
EnterCriticalSection
InitializeCriticalSection
GetCommandLineW
GetVersion
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentThreadId
CreateFileW
CreateThread
DeleteFileW
FileTimeToSystemTime
FlushConsoleInputBuffer
FreeLibrary
GetFileInformationByHandle
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoW
GetStdHandle
GetSystemTimeAsFileTime
GetVersionExA
GetWindowsDirectoryW
GlobalMemoryStatus
InterlockedCompareExchange
InterlockedExchange
LoadLibraryW
lstrlenW
MultiByteToWideChar
ReadFile
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TerminateProcess
UnmapViewOfFile
WideCharToMultiByte
WriteFile
WinExec

user32

GetWindowRect
InflateRect
InvalidateRect
IsIconic
IsWindow
KillTimer
LoadCursorW
LoadIconW
MessageBeep
MessageBoxA
MsgWaitForMultipleObjects
PeekMessageW
PtInRect
RegisterWindowMessageW
ReleaseDC
ScreenToClient
SendMessageW
SetCursor
SetWindowLongW
UpdateWindow
GetWindowLongW
GetUserObjectInformationW
GetSystemMetrics
GetSysColor
GetProcessWindowStation
GetParent
GetMessagePos
GetDesktopWindow
GetDC
GetClientRect
FillRect
EnableWindow
DrawTextW
DrawIcon
DispatchMessageW
DestroyCursor
CopyRect

gdi32

DeleteObject
GetBkMode
CreateSolidBrush
GetStockObject
GetTextExtentPoint32W
SelectObject
SetTextColor
CreatePen
CreateFontIndirectW
CreateCompatibleDC
GetObjectW
CreateCompatibleBitmap

advapi32

RegOpenKeyExW
RegCloseKey
ReportEventA
RegQueryValueW
RegisterEventSourceA

ole32

CoInitialize

oleaut32

GetErrorInfo

Sections

.text
Size: 420KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.recl
Size: 560KB - Virtual size: 559KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6477db399ec584521b4ea9c600c9ccd

Headers

File Characteristics

Imports

msacm32

sqlite3

msvcrt

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 420KB - Virtual size: 418KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 14.0MB

.recl Size: 560KB - Virtual size: 559KB

.rsrc Size: 352KB - Virtual size: 352KB

.text
Size: 420KB - Virtual size: 418KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 14.0MB

.recl
Size: 560KB - Virtual size: 559KB

.rsrc
Size: 352KB - Virtual size: 352KB