7ee8c03391c5cecc078e7c625f7e7ad0

Sharing

Copy URL Twitter E-mail

General

Target

7ee8c03391c5cecc078e7c625f7e7ad0
Size

387KB
MD5

7ee8c03391c5cecc078e7c625f7e7ad0
SHA1

5fd5d3330aa6a293b765b94c316dd320c27a73ca
SHA256

f8d6ff09b9b879e99d9709950d91fce8c2b4eb4d4d7e261fe253cb5871cb7595
SHA512

1d9fb4dbb45ab53ac8d77b5b2ec38c62517039f06e23ff874f59c5e821651ada39fd849771d47870513ff9e79b0b73dc69b60fa59eb2afdd23b3a8477787a735
SSDEEP

6144:18QmVSyTWMbxAcSNONowoGO1Cc3+yEkNz/2rYAsE5Q7Sp8il:18QmwyTZxA4t6CcbNz/g+/e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ee8c03391c5cecc078e7c625f7e7ad0

Files

7ee8c03391c5cecc078e7c625f7e7ad0
.exe windows:4 windows x86 arch:x86

a17f5378d3a07a820e61d2ba16568033

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPath
GetOutlineTextMetricsW
UpdateColors
PlayEnhMetaFile
CombineRgn
AnimatePalette
GdiPlayDCScript
SetTextCharacterExtra
GetKerningPairsW
GetViewportOrgEx
ExtTextOutA
CreateHatchBrush
SwapBuffers
GetBkColor
ExtCreateRegion
DescribePixelFormat

advapi32

CryptGetHashParam
RegEnumKeyW
RegEnumKeyA
CryptDestroyKey
CryptSetProviderW
RegReplaceKeyW
RegSetValueExW
RegCreateKeyW
GetUserNameA
CryptVerifySignatureA
LookupPrivilegeValueA
RegQueryValueExW
RegQueryValueW
RegLoadKeyW
RegQueryMultipleValuesA
CryptContextAddRef
AbortSystemShutdownW
CryptReleaseContext
RegSetValueW
ReportEventW
CryptSetHashParam
CryptDecrypt
RegOpenKeyExA
RegSetValueA
RegCreateKeyExA

comdlg32

ChooseColorW
PrintDlgA
PrintDlgW
ReplaceTextW
GetOpenFileNameA
PageSetupDlgA
LoadAlterBitmap
ChooseColorA
GetOpenFileNameW
GetSaveFileNameW
ChooseFontW
GetSaveFileNameA

user32

CopyImage
CallWindowProcW
MapWindowPoints
SetDlgItemTextA
GetClassInfoA
RegisterClipboardFormatA
CloseDesktop
InvalidateRect
ToUnicodeEx
SetWinEventHook
GetScrollRange
LockWindowUpdate
RealChildWindowFromPoint
GetIconInfo
VkKeyScanW

kernel32

GetStartupInfoW
RtlUnwind
VirtualFree
MultiByteToWideChar
GetCommandLineA
GetCurrentProcessId
TlsSetValue
HeapCreate
WriteFile
HeapDestroy
FreeEnvironmentStringsW
SetLastError
FreeEnvironmentStringsA
EnterCriticalSection
TlsGetValue
UnhandledExceptionFilter
SetHandleCount
InitializeCriticalSection
GetCommandLineW
VirtualQuery
GetVersion
HeapFree
ExitProcess
HeapReAlloc
GetTickCount
TlsAlloc
GetEnvironmentStrings
GetFileType
GetProcAddress
InterlockedExchange
GetLastError
HeapAlloc
GetCurrentProcess
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCompressedFileSizeW
GetModuleFileNameW
TlsFree
IsBadWritePtr
LoadLibraryA
GetStartupInfoA
GetSystemInfo
LeaveCriticalSection
GetEnvironmentStringsW
GetModuleFileNameA
TerminateProcess
GetCurrentThread
DeleteCriticalSection
GetModuleHandleA
QueryPerformanceCounter
GetStdHandle
VirtualAlloc

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 268KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a17f5378d3a07a820e61d2ba16568033

Headers

File Characteristics

Imports

gdi32

advapi32

comdlg32

user32

kernel32

Sections

.text Size: 108KB - Virtual size: 107KB

.data Size: 268KB - Virtual size: 283KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 108KB - Virtual size: 107KB

.data
Size: 268KB - Virtual size: 283KB

.rsrc
Size: 10KB - Virtual size: 9KB