7b9b159e155ac5e2bb75300f15158394

General

Target

7b9b159e155ac5e2bb75300f15158394
Size

207KB
MD5

7b9b159e155ac5e2bb75300f15158394
SHA1

8dfb481808665c4ae37c66f316570a51e7629891
SHA256

30b36b1c076227d680a5d63411d5bf835d08b06e56424791086c87beaf90abd4
SHA512

1ad17b7698d23e07b2c08fbbbfb58ff48bae4123cc6751a6bae2e9a772829c8ddfbad4646db13144406a7218145941f59d4d9c8e5b355639ef27f228ff0874ac
SSDEEP

3072:QeuEpAuIHonTZ2ucXJFelLnFgKAOHKBmYh63gtjMMcB4rWdDT6UDwT8vMC5ZXzrk:pAuIITkucXveljFVqSQxrkT6MwTeXF0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b9b159e155ac5e2bb75300f15158394

Files

7b9b159e155ac5e2bb75300f15158394
.exe windows:4 windows x86 arch:x86

981947e1040925b809770d529a1804f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
RaiseException
GetModuleHandleA
GetShortPathNameW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetLastError
FlushFileBuffers
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapAlloc
ReadFile
SetStdHandle
SetFilePointer
CloseHandle

user32

FillRect
AttachThreadInput
GetMenuDefaultItem
ModifyMenuA
EnableMenuItem
CloseWindowStation
LoadCursorA

gdi32

GetWindowExtEx
DrawEscape
FixBrushOrgEx
GdiGetBatchLimit
CreateDIBPatternBrush
GetEnhMetaFileA
EqualRgn
Rectangle
GetDeviceCaps
SelectFontLocal
EnableEUDC

Sections

.text
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

981947e1040925b809770d529a1804f9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 198KB - Virtual size: 197KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 249KB

.text
Size: 198KB - Virtual size: 197KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 249KB