7bf8f9b4f0a4582c4c069ac17394e8c9

General

Target

7bf8f9b4f0a4582c4c069ac17394e8c9
Size

38KB
MD5

7bf8f9b4f0a4582c4c069ac17394e8c9
SHA1

9e757c4577b91e016f479ddacfd6b04d81125be6
SHA256

6bc413a16d2e0cba744c95a56280805cca2d5e06af719894af46d98806660658
SHA512

33dd6d0980dee118cf734538190bcbb03e00da24ab4147c27334d17c44c8b32cd2d6b81ae94ce997e29e934c33956e214cdc6213fdc720deb8c29ed8dbd03e0a
SSDEEP

384:ocC1+zYztNigcGCBjN1xjR0L5qtjN9ye3cIJ/noqk0WqOe0FAxwr6+e9Pfqbn1:o31+MBcgGRxDv33Z/noS0+x3ha5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bf8f9b4f0a4582c4c069ac17394e8c9

Files

7bf8f9b4f0a4582c4c069ac17394e8c9
.exe windows:4 windows x86 arch:x86

96d932e691371f19a6195b6b35614503

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
HeapFree
DeleteFileA
CloseHandle
Sleep
WinExec
ReadFile
HeapAlloc
GetProcessHeap
GetFileSize
CreateFileA
GetTickCount
GetSystemDirectoryA
ExitProcess
GetVersionExA
lstrcatA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
VirtualFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
GetStringTypeW

user32

CopyIcon
LoadCursorA
GetSystemMetrics
wsprintfA
SetSystemCursor

wininet

InternetOpenA
InternetCloseHandle
DeleteUrlCacheEntry
InternetOpenUrlA

urlmon

URLDownloadToFileA

netapi32

Netbios

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

96d932e691371f19a6195b6b35614503

Headers

File Characteristics

Imports

kernel32

user32

wininet

urlmon

netapi32

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 12KB - Virtual size: 52KB

.aspack Size: 4KB - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 12KB - Virtual size: 52KB

.aspack
Size: 4KB - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB