7ad57626477f561a585a8d6ca82dff9c

Sharing

Copy URL Twitter E-mail

General

Target

7ad57626477f561a585a8d6ca82dff9c
Size

171KB
MD5

7ad57626477f561a585a8d6ca82dff9c
SHA1

880e9b878f1b117ea7a92bce267799ae7e494d9c
SHA256

bab5c0155d5e9eed7e850e47235d0d37124adc2f5afa5e173e66779911435b9a
SHA512

ad827a67b09c480a1d797cd96500409a13fdad62d995924ababaaba1d738db01cd21c62a43e69bb61996c6c4b0e8a61907aacf564342cff33ddc694713c74153
SSDEEP

3072:B+2RsMGOToOfYzAhcIwxdmDRYsr0r8wTyq6Q:BTyRkoOfY8hvor8wZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ad57626477f561a585a8d6ca82dff9c

Files

7ad57626477f561a585a8d6ca82dff9c
.exe windows:4 windows x86 arch:x86

431186c2fbd0006325939775ccd295f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

RegisterWindowMessageA
IsIconic
GetActiveWindow

advapi32

RegCreateKeyA

comctl32

ImageList_GetBkColor
ImageList_Remove
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Draw
ImageList_Create
ImageList_Add
ImageList_DrawEx
ImageList_Read
ImageList_Write

kernel32

IsBadReadPtr
LoadLibraryExA
GetProcAddress
GetCommandLineW
VirtualAlloc
ExitThread
GetVersionExA
GetLastError
GetCommandLineA
LoadLibraryA
ExitProcess
GetOEMCP
GetModuleHandleA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES02
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES86
Size: 512B - Virtual size: 391B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES44
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES00
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES72
Size: 512B - Virtual size: 203B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES43
Size: 1024B - Virtual size: 757B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES22
Size: 512B - Virtual size: 131B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES30
Size: 1024B - Virtual size: 595B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

431186c2fbd0006325939775ccd295f4

Headers

File Characteristics

Imports

user32

advapi32

comctl32

kernel32

Sections

.text Size: 18KB - Virtual size: 17KB

.data Size: 140KB - Virtual size: 140KB

RES02 Size: 2KB - Virtual size: 1KB

RES86 Size: 512B - Virtual size: 391B

RES44 Size: 1KB - Virtual size: 1KB

RES00 Size: 1KB - Virtual size: 1KB

RES72 Size: 512B - Virtual size: 203B

RES43 Size: 1024B - Virtual size: 757B

RES22 Size: 512B - Virtual size: 131B

RES30 Size: 1024B - Virtual size: 595B

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 17KB

.data
Size: 140KB - Virtual size: 140KB

RES02
Size: 2KB - Virtual size: 1KB

RES86
Size: 512B - Virtual size: 391B

RES44
Size: 1KB - Virtual size: 1KB

RES00
Size: 1KB - Virtual size: 1KB

RES72
Size: 512B - Virtual size: 203B

RES43
Size: 1024B - Virtual size: 757B

RES22
Size: 512B - Virtual size: 131B

RES30
Size: 1024B - Virtual size: 595B

.rsrc
Size: 2KB - Virtual size: 2KB