7de9481723e4e2846761eee4584591fa

Sharing

Copy URL

Twitter E-mail

General

Target

7de9481723e4e2846761eee4584591fa
Size

512KB
MD5

7de9481723e4e2846761eee4584591fa
SHA1

1e9d4353dc9a389948cb49f4167a043fed98ceed
SHA256

c18142f20f615a4dfe46ed7dff860e78231abb6e34529900fd727c5e2dfc269f
SHA512

1ccae3580a318b5880ce5fbf395c0589bd454949551b28235ba88045d5cba19093b72fba1425577005680925b3795c87b46a88d52aa1e546c98724aa349f2a59
SSDEEP

6144:HvVM1LCPGbbZ89MhkG1+YgQLK8dL/3/qinIDADImN15nZFBQExLZkMUPc27uBXa0:PQCwZvhV5mkCDYnmEFZkMUPNGuVUpt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7de9481723e4e2846761eee4584591fa

Files

7de9481723e4e2846761eee4584591fa
.exe windows:4 windows x86 arch:x86

97e7854dc99c040948446ab38b2f98cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\sehzr\jgsokz\wavodn.PDB

Imports

user32

GetInputDesktop
TranslateAccelerator
CopyRect
RegisterClassExA
RegisterClassA
IsCharAlphaNumericA

kernel32

InitializeCriticalSection
CreateFileA
DeleteCriticalSection
SetHandleCount
HeapAlloc
FreeLibrary
EnumResourceLanguagesW
GetUserDefaultLCID
IsValidLocale
GetProcessHeap
GetLocaleInfoW
OpenMutexA
OutputDebugStringW
GetEnvironmentStringsW
VirtualFree
InterlockedDecrement
SetStdHandle
GetCommandLineA
GetStringTypeA
CompareStringW
Sleep
GetSystemTimeAsFileTime
GetFileType
GetDateFormatA
EnterCriticalSection
TerminateProcess
GetLongPathNameW
FlushFileBuffers
CloseHandle
OpenProcess
CreateMutexA
SetLastError
GetStringTypeW
UnlockFileEx
GetConsoleOutputCP
IsValidCodePage
GetTickCount
GetConsoleCP
GetACP
SetUnhandledExceptionFilter
ReadFile
HeapReAlloc
TlsGetValue
WriteFile
LCMapStringW
TlsSetValue
InterlockedExchangeAdd
LCMapStringA
GetModuleHandleA
GetConsoleMode
GetProcAddress
FreeEnvironmentStringsA
WriteConsoleA
SetConsoleCtrlHandler
InterlockedExchange
ExitProcess
SetEnvironmentVariableA
QueryPerformanceCounter
MultiByteToWideChar
CompareStringA
GetLocaleInfoA
VirtualAlloc
FormatMessageW
GetTimeFormatA
HeapDestroy
GetStartupInfoA
HeapFree
GetModuleFileNameA
SetFilePointer
TlsAlloc
RtlUnwind
GetCPInfo
GetEnvironmentStrings
HeapSize
HeapCreate
FreeEnvironmentStringsW
EnumSystemLocalesA
LoadLibraryA
lstrcatW
TlsFree
GetOEMCP
VirtualQuery
GetStdHandle
GetCurrentThread
WideCharToMultiByte
GetLastError
InterlockedIncrement
GetCurrentProcessId
GetTimeZoneInformation
UnhandledExceptionFilter
LeaveCriticalSection
GetCurrentProcess
IsDebuggerPresent
GetCurrentThreadId
WriteConsoleW
GetVersionExA

comctl32

InitCommonControlsEx

Sections

.text
Size: 361KB - Virtual size: 361KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97e7854dc99c040948446ab38b2f98cf

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

comctl32

Sections

.text Size: 361KB - Virtual size: 361KB

.rdata Size: 27KB - Virtual size: 36KB

.data Size: 107KB - Virtual size: 106KB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 361KB - Virtual size: 361KB

.rdata
Size: 27KB - Virtual size: 36KB

.data
Size: 107KB - Virtual size: 106KB

.rsrc
Size: 15KB - Virtual size: 15KB