7fdc4b0fe119a37d21c16c049fababfa

Sharing

Copy URL Twitter E-mail

General

Target

7fdc4b0fe119a37d21c16c049fababfa
Size

108KB
MD5

7fdc4b0fe119a37d21c16c049fababfa
SHA1

caba3756da6087675dae1d531462f8089dcc1616
SHA256

6cf4365d32e4c6a12dc50cb71ff0c7ed733347c5003a0eb74ded27f405507452
SHA512

904ade677ba637193545ac7414af88b9aeea61edbed33118e8d65212290b88123fcba4aace7f28988381c75cf389639766539e1a0af2c8f5578c34a709f90c50
SSDEEP

1536:h0M1eFTl6jB4Uyk4IRi3VGnPgOf0gfQQfhp2RzQPZsd4bD3Sz:hh1exuqk4IElqsjQfhp2RRwDC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7fdc4b0fe119a37d21c16c049fababfa

Files

7fdc4b0fe119a37d21c16c049fababfa
.exe windows:4 windows x86 arch:x86

4da67dfa24db2d6503cba52ee5d2de76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsDirectoryA

shell32

SHGetDiskFreeSpaceA

ole32

WriteClassStm
CLSIDFromProgID
CoDisconnectObject
StgCreateDocfileOnILockBytes
CoTaskMemFree
CreateStreamOnHGlobal

kernel32

SetEvent
GetModuleHandleA
WriteFile
GetACP
SizeofResource
VirtualAlloc
ExitProcess
GetDateFormatA
WaitForSingleObject
GetProcAddress
MoveFileA
FreeResource
LocalReAlloc
GetEnvironmentStrings
CreateEventA
ExitThread

gdi32

CreateBitmap

version

VerFindFileA
VerInstallFileA

user32

GetActiveWindow
GetCursorPos
CallNextHookEx
SetScrollInfo
SetForegroundWindow
CharUpperBuffA
GetMenuItemInfoA
OffsetRect
RemovePropA
SetRect
SetWindowLongW
SetPropA
OpenClipboard
DrawIconEx
MapWindowPoints
GetCursor
InsertMenuA
EndPaint
GetWindowPlacement
CreateWindowExA
GetScrollInfo
SendMessageA
GetWindowDC
CreateMenu
DeleteMenu
IsZoomed
DefWindowProcA
GetMenuItemCount
SetScrollPos
CharNextW
IsWindow
DefMDIChildProcA
GetWindow
PostQuitMessage
ShowOwnedPopups
InsertMenuItemA
GetTopWindow
GetClassInfoA
GetKeyboardState
GetWindowTextA
UpdateWindow
DispatchMessageA
GetClassLongA
GetDesktopWindow
BeginPaint
WaitMessage
CharNextA
RedrawWindow
PtInRect
GetSysColorBrush
GetClipboardData
DestroyIcon
SetClassLongA
SetWindowPlacement
InflateRect
CharLowerA
FillRect
GetFocus
SetCapture
IsWindowEnabled
GetMenuState
GetWindowRect
GetMenuStringA
ScreenToClient
SetFocus
MessageBoxA
WindowFromPoint
PeekMessageA
GetLastActivePopup
ShowWindow
IsDialogMessageW
ActivateKeyboardLayout
GetSystemMetrics
RegisterWindowMessageA
LoadIconA
UnregisterClassA
GetKeyboardLayoutList
MapVirtualKeyA
SetClipboardData
SetWindowLongA
LoadBitmapA
MsgWaitForMultipleObjects
DrawEdge
DrawFrameControl
ShowScrollBar
IsWindowVisible
GetPropA
DestroyWindow
FrameRect
CloseClipboard
GetKeyboardLayoutNameA
EnumThreadWindows
CharLowerBuffA
DrawTextA
CharToOemA

Sections

CODE
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4da67dfa24db2d6503cba52ee5d2de76

Headers

File Characteristics

Imports

shlwapi

shell32

ole32

kernel32

gdi32

version

user32

Sections

CODE Size: 29KB - Virtual size: 29KB

.data Size: 75KB - Virtual size: 74KB

DATA Size: 3KB - Virtual size: 2KB

CODE
Size: 29KB - Virtual size: 29KB

.data
Size: 75KB - Virtual size: 74KB

DATA
Size: 3KB - Virtual size: 2KB