7a11fa43f8140ab0e23a7dfb5dcc32b8

General

Target

7a11fa43f8140ab0e23a7dfb5dcc32b8
Size

103KB
MD5

7a11fa43f8140ab0e23a7dfb5dcc32b8
SHA1

f92633edffda2fad53eefd962c97918cd6177f8e
SHA256

e7fb0dd4c6ef1c6e03c8a1262da29c6406c86bcf7dd168c696fdba8aa53307ec
SHA512

9cd76e2af33c8bb9e01f1e309ce1907fc2e9eb1e7bc2f58fccdabb042b073668607aa1eb22173340d6c9f697afd1bae5af8f24045d0a96a9af1990efabb648f3
SSDEEP

3072:tVrEDKT/CK6zs5JLprMUXaAWiQOzVUZJ1P+r:tVrE+jCK6zAJLdHHWL60J1PC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a11fa43f8140ab0e23a7dfb5dcc32b8

Files

7a11fa43f8140ab0e23a7dfb5dcc32b8
.exe windows:4 windows x86 arch:x86

430cc40a8969f30c8313f9021992d100

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
CloseHandle
ReleaseMutex
GetLastError
CreateMutexA
ExitProcess
CreateThread
DeleteFileW
GetModuleHandleA
FreeResource
lstrlenA
SizeofResource
CreateFileW
FindResourceW
GetSystemDirectoryW
lstrcatW
GetTickCount
lstrlenW
SleepEx
VirtualAlloc
VirtualProtectEx
VirtualAllocEx
SetThreadContext
ResumeThread
TerminateProcess
LoadLibraryW
GetProcAddress
CreateProcessW
GetThreadContext
ReadProcessMemory

user32

wsprintfW
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
UpdateWindow
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
FindWindowW
SendMessageW

advapi32

RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyExW
CreateServiceW
CloseServiceHandle
DeleteService
OpenServiceW
OpenSCManagerW
StartServiceW
ChangeServiceConfigW
RegCloseKey

msvcrt

ftell
fseek
fclose
fopen
strstr
strchr
_except_handler3
realloc
malloc
_strnset
fread
??2@YAPAXI@Z

Sections

.xianni
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ABCclim
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

430cc40a8969f30c8313f9021992d100

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.xianni Size: 2KB - Virtual size: 1KB

.ABCclim Size: 5KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 7KB

.rsrc Size: 92KB - Virtual size: 91KB

.xianni
Size: 2KB - Virtual size: 1KB

.ABCclim
Size: 5KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 7KB

.rsrc
Size: 92KB - Virtual size: 91KB