7db0962c3ae0e9bae22b57e261533f38

General

Target

7db0962c3ae0e9bae22b57e261533f38
Size

285KB
MD5

7db0962c3ae0e9bae22b57e261533f38
SHA1

53cb521874f5d449d171b9f18e9e8918e6150cbd
SHA256

54fd08a07127a64bd5e7c0373749962e3397800c3a7e357f16e8ed7a27372282
SHA512

f4916bd1c653e07817e40a705848bae424dc47d717dbdea8d9690b358578d43debe6c3582d2a482ccaf2872468cfe03849d1356d4b8e412e15545e4d717a8d63
SSDEEP

6144:2FrJXRup34sB7VF4iE/XO3KxiYVS7GK5xxt8ZkBrVk6s36Gn+W:2NS4A7vG/ea8cSFxx60rVJs36G1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7db0962c3ae0e9bae22b57e261533f38

Files

7db0962c3ae0e9bae22b57e261533f38
.exe windows:4 windows x86 arch:x86

62bb4a50aa2855d4ddae949894f8c644

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

kernel32

lstrlenA
GetProcessHeap
GetWindowsDirectoryA
GlobalFindAtomW
HeapFree
LoadLibraryExW
ExpandEnvironmentStringsW
LoadLibraryW
FindClose
ReleaseMutex
GetPrivateProfileIntW
lstrcmpiW
GetModuleHandleW
LoadLibraryExA
CopyFileW
HeapAlloc
LocalFree
WritePrivateProfileStringW
GetSystemInfo
EnumResourceLanguagesA
GetPrivateProfileIntW
GetCurrentDirectoryW
FindNextFileW
GetCurrentProcessId
GetPrivateProfileStringW
FreeLibrary
WaitForSingleObject
CreateMutexW
SetFileAttributesW
GetModuleHandleA
GetSystemDirectoryW
FindFirstFileW
GetCurrentProcess

shlwapi

GetAcceptLanguagesA
UrlUnescapeW
PathFindExtensionW
PathIsRelativeW
StrCmpIW
PathRemoveFileSpecW
PathCreateFromUrlW
PathAppendW
UrlCreateFromPathW
PathCombineW

rpcrt4

UuidCreate

Sections

.text
Size: 142KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62bb4a50aa2855d4ddae949894f8c644

Headers

File Characteristics

Imports

shell32

kernel32

shlwapi

rpcrt4

Sections

.text Size: 142KB - Virtual size: 273KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 139KB - Virtual size: 139KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 142KB - Virtual size: 273KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 139KB - Virtual size: 139KB

.rsrc
Size: 1024B - Virtual size: 4KB