7dd3c57a9fb9044f152fbf1994093c88

Sharing

Copy URL Twitter E-mail

General

Target

7dd3c57a9fb9044f152fbf1994093c88
Size

122KB
MD5

7dd3c57a9fb9044f152fbf1994093c88
SHA1

f0d0ed8668609f56b47dd3dcd4ae98082dbbc016
SHA256

088ad0c362ab51d71c3b048ed8bc793836aa724527e49fbba2f1bdaf6ed6cdd6
SHA512

be9753c79b2d40b6b43116248482675cd48704f4d4f8cd89bae8961369a00ab8f91221cbe20272b9bc1e3a7bd57769e4eba81e52d6eaf635623c63678de2a1bf
SSDEEP

3072:Jj52mD9YdfylP91KOBt3vf4N19Bp391LfHtYlIqtx1W:RImeJW1K83vw7B91LfNk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7dd3c57a9fb9044f152fbf1994093c88

Files

7dd3c57a9fb9044f152fbf1994093c88
.exe windows:4 windows x86 arch:x86

fcc2c45a8efdd2ee8b72b1e0044955f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetCurrentProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
SetFileTime
GetFileTime
CreateFileA
SetFileAttributesA
Sleep
GetSystemWindowsDirectoryA
GetModuleFileNameA
GetSystemDirectoryA
CreateProcessA
WriteFile
CopyFileA
FindFirstFileA
GetCurrentDirectoryA
SetLastError
FormatMessageA
LocalFree
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetLastError
MoveFileExA
DeleteFileA
GetVersion
FreeLibrary
OpenProcess
CreateRemoteThread
GetProcAddress
WaitForSingleObject
CloseHandle
LoadLibraryA
FindClose
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
WideCharToMultiByte
LCMapStringW
ExitProcess
TerminateProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
RtlUnwind
InterlockedExchange
HeapSize

user32

MessageBoxA
wsprintfA

advapi32

CreateServiceA
ControlService
DeleteService
OpenSCManagerA
CloseServiceHandle
OpenServiceA
StartServiceA
QueryServiceStatus
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

sfc

SfcIsFileProtected

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcc2c45a8efdd2ee8b72b1e0044955f3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

sfc

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 90KB - Virtual size: 90KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 90KB - Virtual size: 90KB