7f02b2981502d6dfed94640da888f193

General

Target

7f02b2981502d6dfed94640da888f193
Size

10KB
MD5

7f02b2981502d6dfed94640da888f193
SHA1

9940ac9a451899a2de6ba50bad8744a6889abf42
SHA256

bccd63a397ac1259b1de096d65b016b80c873a7da58625807cc4c94ba8294411
SHA512

b4fe2f0b97ee5ecd0707b7f3e1e5d127a359f4645983a4991bbe5c0c9278f9a12b57bba546c51534fd344c80683dda153bf92a32068bcc05f73ba340793fa990
SSDEEP

192:inyZ2d5CwQGCQXdQBfbVRf6pT3KT+qNTNY0bG2Gi6:NSwwQGCQXdQBfbVRfcKT+qTNY0i2D6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f02b2981502d6dfed94640da888f193

Files

7f02b2981502d6dfed94640da888f193
.exe windows:4 windows x86 arch:x86

2c80f584faee7711fccf5025225fded0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
lstrcpyA
LoadLibraryA
FreeLibrary
CreateFileA
CreateEventA
lstrcatA
WaitForSingleObject
Sleep
DeleteFileA
ExitThread
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
lstrlenA
lstrcmpA
WaitForMultipleObjects
ResetEvent
CreateThread
SetEvent
WriteFile
GetSystemDirectoryA
CreateProcessA
SizeofResource
LoadResource
FindResourceA
Process32Next
Process32First
CreateToolhelp32Snapshot
CloseHandle
GetProcAddress

user32

DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA
CharUpperA
CloseWindow
DestroyWindow
wsprintfA
ShowWindow
MsgWaitForMultipleObjects

advapi32

RegCreateKeyExA
RegNotifyChangeKeyValue
RegOpenKeyA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueExA

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c80f584faee7711fccf5025225fded0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 17KB - Virtual size: 16KB