7b7908fde4db61671145a884a4e7536b

Sharing

Copy URL Twitter E-mail

General

Target

7b7908fde4db61671145a884a4e7536b
Size

29KB
MD5

7b7908fde4db61671145a884a4e7536b
SHA1

c7a75e1337b2ca652324f4bced1f71603af5bb70
SHA256

95c1802131c37b0eb6c541097d1d47a2800b1b9dead4d6e3b59ba6f7fc9cd892
SHA512

3bc39c8320db01a7648099008d6aa05890d3a82075da67b494214967cbcb61102cdb2c7c9e64d9b71dce294de0fe37eeeb1878aa40555050fc2b04f05ad679aa
SSDEEP

768:keHRfNN9zV8aCEr01ejhw9PXpX1D2NCDOICj:kexFN9zOLErmtH2NgC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b7908fde4db61671145a884a4e7536b

Files

7b7908fde4db61671145a884a4e7536b
.dll windows:4 windows x86 arch:x86

5eec8d1ba9b2042092e86ce8a71c85b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CreateMutexA
GetCurrentProcessId
GetPrivateProfileStringA
GetModuleHandleA
VirtualAlloc
ExitProcess
VirtualFree
LoadLibraryA
WritePrivateProfileStringA
GetCurrentThread
GetProcAddress
CreateRemoteThread
ReadProcessMemory
WriteProcessMemory
VirtualAllocEx
OpenProcess
ResumeThread
TerminateProcess
GetCommandLineA
VirtualProtectEx
GetCurrentProcess
SetEvent
WriteFile
GetCurrentThreadId
InitializeCriticalSection
VirtualProtect
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
SetThreadContext
OpenThread
SetUnhandledExceptionFilter
IsBadReadPtr
TerminateThread
CreateThread
CreateEventA
GetLastError
WaitForSingleObject
ResetEvent
CreateFileA
ReadFile
CloseHandle
Sleep
DeleteFileA
GetModuleFileNameA
GetTempPathA

user32

CallNextHookEx
GetWindowThreadProcessId
FindWindowA
SetWindowsHookExA
UnhookWindowsHookEx
GetForegroundWindow
GetWindowTextA

wininet

InternetCloseHandle
InternetReadFile

shlwapi

PathFileExistsA

msvcrt

_initterm
malloc
_adjust_fdiv
_strupr
_stricmp
_strlwr
_wcslwr
free
fopen
fread
strcat
??2@YAPAXI@Z
memcpy
strrchr
memset
sprintf
strcpy
strlen
atoi
strchr
strstr
wcsstr
strcmp
wcslen
fclose

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdt
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5eec8d1ba9b2042092e86ce8a71c85b0

Headers

File Characteristics

Imports

kernel32

user32

wininet

shlwapi

msvcrt

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1KB - Virtual size: 3KB

sdt Size: 512B - Virtual size: 4B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1KB - Virtual size: 3KB

sdt
Size: 512B - Virtual size: 4B

.reloc
Size: 3KB - Virtual size: 2KB