7aed24309d9f7932c13323969e9c326a

General

Target

7aed24309d9f7932c13323969e9c326a
Size

44KB
MD5

7aed24309d9f7932c13323969e9c326a
SHA1

55895242faaf85a9574244221ee4e3c9d5c37223
SHA256

85d3112a50457e76421e9aa4d0ccf5befa291c5de5281c3ac8393b893608e579
SHA512

7a1fb827b13a88ec6d485ec4f2d8ee49fc08baef9c9df8db5b0d8f8712f8597f784650a4c1f75ed579630c63f7353e4b7cc51634ad837a8a4b33d86d1d318da5
SSDEEP

768:tTwxetZukpkav6YFKiIQB/y0Yc3gLa1Is:0etZuXlYFKWi9La

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7aed24309d9f7932c13323969e9c326a

Files

7aed24309d9f7932c13323969e9c326a
.dll regsvr32 windows:4 windows x86 arch:x86

541618482e0ca43ad6ac51a70d5f1302

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WinExec
GetWindowsDirectoryA
GetSystemDirectoryA
GetProcAddress
GetLocalTime
CreateMutexA
InterlockedIncrement
CreateProcessA
VirtualAlloc
GetModuleFileNameA
LoadLibraryA
CreateThread
CloseHandle
GetLastError

user32

ShowWindow
CreateWindowExA
SetWindowsHookExA
RegisterClassExA
FindWindowExA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
UnhookWindowsHookEx
KillTimer
PostMessageA
DefWindowProcA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

msvcrt

??3@YAXPAX@Z
_adjust_fdiv
malloc
_initterm
free
strrchr
atoi
__CxxFrameHandler
??2@YAPAXI@Z
_stricmp
strchr
sprintf
_except_handler3
fclose
fwrite
fopen

wininet

InternetSetOptionA
InternetOpenA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
HttpQueryInfoA

shlwapi

SHGetValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

541618482e0ca43ad6ac51a70d5f1302

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

wininet

shlwapi

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 882B

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 882B