7bf868fe78a1c80e6a40668d28f30369

Sharing

Copy URL Twitter E-mail

General

Target

7bf868fe78a1c80e6a40668d28f30369
Size

295KB
MD5

7bf868fe78a1c80e6a40668d28f30369
SHA1

b60e3e6cf77d9002acadbaa4c5c83e481129bd29
SHA256

7ddf8119fdaf343c64a827889d71d5f030786c90a2f52311dac1b140729a7c3a
SHA512

f229b901a6769eb8084b831dc60bdbd201af84e5cd50d505cd8644107789052467d306e103b4d401e69cf5dd646288f3727163d6cfe2142f5697adf68f4411a7
SSDEEP

6144:9Xgz7VcKFxCveXLLbmtph93E3lXi9knQwuUSXPygBHl0YjR7faan5n:mcKCCL/mTn3n9P8oygh9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bf868fe78a1c80e6a40668d28f30369

Files

7bf868fe78a1c80e6a40668d28f30369
.exe windows:4 windows x86 arch:x86

90561382d9d79adc2ffc49b708fe8196

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSALookupServiceEnd
WSAAsyncGetServByPort
WSAIsBlocking
WSAHtons
select

comdlg32

ReplaceTextA
GetSaveFileNameA

ole32

CoQueryProxyBlanket
StgCreateStorageEx
OleSave
CoDisconnectObject
OleRegGetMiscStatus
CoReleaseServerProcess
CreateStreamOnHGlobal
WriteClassStg
OleFlushClipboard

kernel32

EnumTimeFormatsW
GetModuleHandleA
VirtualAlloc
CreateDirectoryExA
GetFileInformationByHandle
PeekNamedPipe
GetLocaleInfoW
FillConsoleOutputCharacterA
WriteProcessMemory
_hread
OutputDebugStringA
GetLargestConsoleWindowSize
ReadConsoleInputW
GetConsoleCursorInfo
FreeLibrary
FormatMessageW
CancelIo
GetBinaryTypeA
EnumCalendarInfoW
GlobalFree
FindFirstFileA
RaiseException
lstrcmpiW
CompareStringA
GetTempPathW
_lopen
SystemTimeToFileTime
SetSystemTime
VirtualUnlock
Beep
GetStartupInfoA
InitializeCriticalSection
IsBadStringPtrA
EnumResourceNamesA
GetCurrentProcess

oleaut32

SysAllocStringLen
SafeArrayGetElement
SysStringLen
SetErrorInfo
LoadTypeLi
SafeArrayPutElement
SysFreeString

gdi32

TranslateCharsetInfo
RemoveFontResourceA
GetStretchBltMode
CreateRoundRectRgn
MoveToEx
GetWinMetaFileBits
GetObjectType
SetPixelFormat
GetWindowOrgEx
BeginPath
CreateBrushIndirect
SetDIBits
SelectClipPath

shell32

SHGetSpecialFolderPathW
DragFinish
ShellExecuteA
SHGetSpecialFolderPathA
FindExecutableA
SHChangeNotify
SHGetPathFromIDListA

version

VerQueryValueA

user32

DestroyWindow
IsChild
RegisterClipboardFormatA
PostMessageA
BeginDeferWindowPos
LockWindowUpdate
GetScrollBarInfo
TranslateAcceleratorA

advapi32

SetEntriesInAclA
ImpersonateSelf
ClearEventLogW
LookupAccountSidW
CreateServiceW
CryptVerifySignatureW
CryptGetHashParam
IsValidSid
GetUserNameA
GetAce
BuildTrusteeWithSidW
SetSecurityDescriptorOwner
BuildTrusteeWithNameW
AddAccessAllowedAce
RegCloseKey
InitializeSid
RegLoadKeyA
IsTextUnicode
GetSecurityDescriptorDacl
LookupPrivilegeNameA
RegSetKeySecurity
SetThreadToken
GetFileSecurityA
DuplicateToken
CryptGetKeyParam
CryptGenRandom
ObjectCloseAuditAlarmW
OpenSCManagerA
CryptDecrypt
CryptGetProvParam
GetSecurityDescriptorOwner
ReportEventA
RegQueryInfoKeyA
RegNotifyChangeKeyValue
RegSaveKeyW
EnumDependentServicesW
RegOpenKeyExW
SetFileSecurityA
CloseServiceHandle
StartServiceCtrlDispatcherA
StartServiceCtrlDispatcherW
StartServiceA
EnumDependentServicesA

msvcrt

_mbsnicmp
tmpnam
_wsplitpath
wctomb
_wctime
_ultoa
getenv
_c_exit
_i64tow
_ecvt
_mbsnbicmp
_open_osfhandle
atol
swscanf
_wtoi64
ctime
calloc
_mbctolower
fscanf
_snwprintf
_itow
_wcsupr
_setmbcp
wscanf
_wcsnicmp
_ismbcspace
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
rename
_wgetenv
fputc

Sections

akykqye
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

kskycag
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

kiyycwc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gasmyu
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90561382d9d79adc2ffc49b708fe8196

Headers

File Characteristics

Imports

ws2_32

comdlg32

ole32

kernel32

oleaut32

gdi32

shell32

version

user32

advapi32

msvcrt

Sections

akykqye Size: 194KB - Virtual size: 193KB

kskycag Size: 5KB - Virtual size: 4KB

kiyycwc Size: 88KB - Virtual size: 87KB

gasmyu Size: 7KB - Virtual size: 7KB

akykqye
Size: 194KB - Virtual size: 193KB

kskycag
Size: 5KB - Virtual size: 4KB

kiyycwc
Size: 88KB - Virtual size: 87KB

gasmyu
Size: 7KB - Virtual size: 7KB