7d792a3ebf1d8736786648c95368f5c2

Sharing

Copy URL Twitter E-mail

General

Target

7d792a3ebf1d8736786648c95368f5c2
Size

72KB
MD5

7d792a3ebf1d8736786648c95368f5c2
SHA1

f55d5e7e5fc12035963be64a953564660665a273
SHA256

0061844a3360ef94e51e77f2d4b55f720682a56f59bcd9aa5a389eb588660f8b
SHA512

5c77ecb5c73b329d87208e74a831f40856230edbd3ab7c5ae969d7902f1bee3ea4394c7114b091a00ff11a149f5b198262601d55c7b63a5ee7481288842a699d
SSDEEP

768:xDkfWemN0AQn7N6c2V7RfPrkHr8fxCU3imrGf+DmjpiMH19kF4x4UwNsQd4iyL:qfWeK0tgc2VVLpffqHjpp19VxRw6QLyL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d792a3ebf1d8736786648c95368f5c2

Files

7d792a3ebf1d8736786648c95368f5c2
.exe windows:4 windows x86 arch:x86

16e2b3e20238008b693eb578d1ea4717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalDeleteAtom
GetProcessHeap
IsBadReadPtr
DeleteFileA
ExitProcess
GlobalAlloc
WriteFile
RaiseException
WaitForSingleObject
ReadFile
lstrlenA
GetTickCount
GetCommandLineW
GetUserDefaultLCID
VirtualAlloc
GlobalFindAtomA
HeapAlloc
LoadLibraryA
LocalAlloc
GetCurrentProcessId
VirtualQuery
GetLastError
GetLocaleInfoA

user32

RegisterWindowMessageA
GetMenuStringA
SetScrollPos
SendMessageW
DispatchMessageW
SetWindowsHookExA
IsDlgButtonChecked
CharNextW
MsgWaitForMultipleObjects
GetPropA
LoadIconA
GetKeyboardLayout
DispatchMessageA
SetParent
CallWindowProcA
GetWindowLongW
SetScrollInfo
DefFrameProcA
SetClassLongA
UpdateWindow
GetLastActivePopup
KillTimer
IsCharUpperA
GetIconInfo
SetPropA
RemovePropA
DefMDIChildProcA
GetSystemMenu
IsChild
ClientToScreen
IsWindow
GetWindowPlacement
GetKeyState
TranslateMDISysAccel
GetSysColorBrush
DrawFrameControl
PostMessageA
GetKeyboardState
IsZoomed
GetSysColor
GetTopWindow
CharLowerBuffA
BeginPaint
EqualRect
IsWindowUnicode
TranslateMessage
wsprintfA
FindWindowA
SetRect
GetWindowTextA
DrawIcon
GetClientRect
GetScrollPos
EnumWindows
SetTimer
GetWindowLongA
SetCursor
PtInRect
GetMenu
DrawMenuBar
MapVirtualKeyA
PostQuitMessage
ScreenToClient
InsertMenuItemA
GetWindowRect
EndPaint
ActivateKeyboardLayout
CreatePopupMenu
WindowFromPoint
SetCapture
DrawTextA
GetClassInfoA
GetActiveWindow
GetWindowTextLengthA
DestroyMenu
SetWindowPos
SetMenu
IsWindowEnabled
ShowWindow
DefWindowProcA
ShowScrollBar
InvalidateRect
GetKeyboardLayoutList
GetMenuItemInfoA
InsertMenuA
AdjustWindowRectEx
ScrollWindow
IsDialogMessageW
SetWindowTextA
DestroyCursor
LoadStringA
GetCursorPos
RedrawWindow
UnregisterClassA
SendMessageA
IsIconic
GetKeyboardLayoutNameA
SetFocus
CallNextHookEx
EnumThreadWindows
DrawEdge
GetDesktopWindow
DestroyWindow
EnableMenuItem
RegisterClipboardFormatA
GetFocus
EmptyClipboard
IsMenu
GetMenuItemCount
LoadKeyboardLayoutA
GetForegroundWindow
CharUpperBuffA
SetClipboardData
GetMenuState
DestroyIcon

gdi32

GetDIBColorTable
SelectObject
SelectPalette
CreateFontIndirectA

ole32

CoRevokeClassObject
CLSIDFromProgID

comdlg32

ChooseColorA
GetFileTitleA
GetOpenFileNameA

Exports

Exports

lSgk9k4tn@12
qWST4fDOEOaPp@16
yoDcC8vk_F
_Nf3jnN@20
_d420jRrL@12

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16e2b3e20238008b693eb578d1ea4717

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

comdlg32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 37KB

.data Size: 55KB - Virtual size: 54KB

.rsrc Size: 1024B - Virtual size: 1020B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 37KB

.data
Size: 55KB - Virtual size: 54KB

.rsrc
Size: 1024B - Virtual size: 1020B