7bc8a6d131401344d495a7566c4465db

Sharing

Copy URL Twitter E-mail

General

Target

7bc8a6d131401344d495a7566c4465db
Size

2.8MB
MD5

7bc8a6d131401344d495a7566c4465db
SHA1

0ad73550a89160c651e2b299a11772e17255ec3a
SHA256

e84d42199643cecf8833a069e4afd3d2cd7e3a3f7f17878c7e26a4dfa337db82
SHA512

6f747a0ca2d3c554666a328602a839f54a97d2e633483d80d15acd5ee060d3c9da9a76d8341cbf89f7fd54da2bbd709c0afee2c901ae39a210c18e84f4e13426
SSDEEP

49152:chN/uWdAF39OUCyAc1METmhaixYgRVagBAgupTf6hrRWYwqXRaWO32gJ:cts3DA0MDakrlupg1nwqXRtONJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bc8a6d131401344d495a7566c4465db

Files

7bc8a6d131401344d495a7566c4465db
.exe windows:4 windows x86 arch:x86

3fb4772f9a0b1cf4b7a274f8d267aada

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

ShowCaret

gdi32

GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

RegDeleteValueA

shell32

DragFinish

comctl32

ImageList_SetOverlayImage

oledlg

ord4

ole32

OleCreateLinkFromData

olepro32

ord253

oleaut32

SysAllocStringLen

ws2_32

listen

wininet

InternetGetConnectedState

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dat1
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dat0
Size: - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dat2
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dat3
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fb4772f9a0b1cf4b7a274f8d267aada

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

ws2_32

wininet

Sections

.text Size: - Virtual size: 1.3MB

.rdata Size: - Virtual size: 133KB

.data Size: - Virtual size: 100KB

.idata Size: - Virtual size: 23KB

.dat1 Size: 16KB - Virtual size: 14KB

.dat0 Size: - Virtual size: 74KB

.dat2 Size: - Virtual size: 2.3MB

.dat3 Size: 2.8MB - Virtual size: 2.8MB

.reloc Size: 4KB - Virtual size: 100B

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: - Virtual size: 1.3MB

.rdata
Size: - Virtual size: 133KB

.data
Size: - Virtual size: 100KB

.idata
Size: - Virtual size: 23KB

.dat1
Size: 16KB - Virtual size: 14KB

.dat0
Size: - Virtual size: 74KB

.dat2
Size: - Virtual size: 2.3MB

.dat3
Size: 2.8MB - Virtual size: 2.8MB

.reloc
Size: 4KB - Virtual size: 100B

.rsrc
Size: 12KB - Virtual size: 11KB