7ca70721be92fa24859339d5754b925c

Sharing

Copy URL Twitter E-mail

General

Target

7ca70721be92fa24859339d5754b925c
Size

23KB
MD5

7ca70721be92fa24859339d5754b925c
SHA1

800a3211fab170af572be069ded30eb81a8a85ce
SHA256

ef2f258137566c3acefcc14a694cb462e84888104dafff48aaa9a24aded0734c
SHA512

2fa7aa9b6a8b4d4e102851ac09b4453e81ed371c1bb8547a98ca9821dc91a9d7ea7fae2e6c5c7ca91362635358867b1234d3a217c36d4a277d4ac46df9d5c05b
SSDEEP

384:05UGnMERZYtgktykZQ/u9pGXRpUbJbIJPQ6XoedQ1:05UGnbYt3yN/u9wX3SJ0PQ6c1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ca70721be92fa24859339d5754b925c

Files

7ca70721be92fa24859339d5754b925c
.exe windows:4 windows x86 arch:x86

14335e2c29b517dd6e0cbcf648c0e599

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

msvcrt

isleadbyte
_stat
__STRINGTOLD
towupper
_strdate
memchr
strrchr
_scalb
_cwprintf
_wcstoi64
_mbsncpy
strtok
_wasctime
ldiv
_fcvt
_lfind
_findfirsti64

user32

SetCursor
RegisterClassA
SetParent
VkKeyScanExA
MapWindowPoints
GetClassInfoW
FindWindowExW
DrawTextExW
SetDoubleClickTime
DdeReconnect

advapi32

EncryptFileA
SetServiceBits
SetEntriesInAccessListA
RegQueryValueExA
ReadEventLogA
ObjectCloseAuditAlarmA
LsaQueryTrustedDomainInfo
LookupAccountSidA
LogonUserExW

ole32

UpdateDCOMSettings
StringFromCLSID
StgCreatePropSetStg
StgCreateDocfileOnILockBytes
SNB_UserUnmarshal
SNB_UserSize
ReadClassStg
OleSaveToStream
OleIsCurrentClipboard
OleCreateStaticFromData
CoGetPSClsid
CLIPFORMAT_UserSize
HDC_UserFree

ntdll

RtlQueueWorkItem
RtlGetNtProductType
RtlConvertExclusiveToShared
NtSetInformationJobObject
NtQueryPortInformationProcess
LdrLoadDll
LdrFlushAlternateResourceModules
LdrFindResourceDirectory_U
RtlTraceDatabaseLock
ZwCreateSection
ZwQuerySystemTime
ZwReleaseSemaphore
ZwMapUserPhysicalPages

comctl32

ord3
ImageList_GetIconSize
ord336
FlatSB_GetScrollInfo
PropertySheetA
PropertySheet

shlwapi

ColorRGBToHLS
PathFindFileNameW
StrChrIA
SHRegGetUSValueA
SHEnumKeyExA
PathRemoveBlanksW
StrStrA

version

VerInstallFileA
VerQueryValueA
VerFindFileW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14335e2c29b517dd6e0cbcf648c0e599

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

advapi32

ole32

ntdll

comctl32

shlwapi

version

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 7KB - Virtual size: 6KB

.rsrc Size: 1024B - Virtual size: 1024B

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 1024B