7f5d476f0d801232ede7faeaa6681467

General

Target

7f5d476f0d801232ede7faeaa6681467
Size

44KB
MD5

7f5d476f0d801232ede7faeaa6681467
SHA1

74458359bd91138deb3a83b61a74a1dfea55e064
SHA256

a801884945583ca17ddef1c85212c989aac14c5eecc403d433395363cf886a58
SHA512

fdf8e980a4e0f5102308b2659101f71e76d82589839abdc0b39aa687911b2bd606371ec71b422eb043d1c96c690be9679d409f03379944e7dd347af6ff1be13c
SSDEEP

768:cC477icEgMxvflpbxACxNc23YAm8hifbw5uz5JK:r2vMx33rc2IEwD/I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f5d476f0d801232ede7faeaa6681467

Files

7f5d476f0d801232ede7faeaa6681467
.exe windows:4 windows x86 arch:x86

c5689d26d20351e4a88dfa7d01d905c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
lstrcatA
Sleep
GetStdHandle
CloseHandle
HeapFree
GetCPInfo
SetLastError
lstrcpynA
HeapAlloc
GetFileType
lstrcpyA
GetModuleFileNameA
lstrcmpiA
lstrlenA
GetLocalTime
GetFileSize

comctl32

ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_DragShowNolock
ImageList_Replace
ImageList_GetIcon
ImageList_DragEnter
ImageList_Create
ImageList_AddMasked
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_LoadImage
ImageList_Copy
ImageList_GetImageRect
ImageList_DrawEx
ImageList_Destroy
ImageList_LoadImageW
ImageList_Draw

advapi32

RegLoadKeyA
RegQueryValueA
RegOpenKeyExA
RegEnumKeyExW
RegReplaceKeyA
RegQueryValueExA
RegEnumKeyA
RegDeleteValueA
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
RegCreateKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegDeleteValueW
RegCreateKeyW
RegLoadKeyW

user32

CalcMenuBar
DrawTextA
DialogBoxParamW
CloseWindow
DrawIconEx
DialogBoxParamA
GetWindowTextA
CopyRect
LoadCursorA
GetMenu
CopyIcon
GetCursor
IsWindow
DrawTextW
CreateIcon
GetDlgItem
AlignRects
GetDC

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ddata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ

.resr
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5689d26d20351e4a88dfa7d01d905c2

Headers

File Characteristics

Imports

kernel32

comctl32

advapi32

user32

Sections

.text Size: 9KB - Virtual size: 9KB

.ddata Size: 24KB - Virtual size: 24KB

.odata Size: 4KB - Virtual size: 12KB

.reloc Size: - Virtual size: 3KB

.resr Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.ddata
Size: 24KB - Virtual size: 24KB

.odata
Size: 4KB - Virtual size: 12KB

.reloc
Size: - Virtual size: 3KB

.resr
Size: 2KB - Virtual size: 1KB