7ffee1928d7109b7b8bfd93cc38b0ce8

General

Target

7ffee1928d7109b7b8bfd93cc38b0ce8
Size

52KB
MD5

7ffee1928d7109b7b8bfd93cc38b0ce8
SHA1

e3a4d4560dd0e936459037ad0189fb6724fd55b9
SHA256

0f274df2e0ccfdd57c0d294177479b1df676b321f764674fb24ffee11cad6a32
SHA512

bd8f088453b64c1f7de824715199d29429a41960775cb535d79982f3797aeb6fef2ec612713b336cd515daa685f74eddcc90904184254c961e81b707922db680
SSDEEP

768:p0LfKLlRp8EFZQaQY2LCdXZODzQXZj6DX46EyOs4OFJoZ0:uLfKxRp8uZpBZCkJjWVEjWo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ffee1928d7109b7b8bfd93cc38b0ce8

Files

7ffee1928d7109b7b8bfd93cc38b0ce8
.exe windows:4 windows x86 arch:x86

66169b17d56a477ef905940d014d47ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
GetProcAddress
GetCurrentProcess
GetVersion
GetCommandLineA
WideCharToMultiByte
FreeEnvironmentStringsW
SetStdHandle
LCMapStringW
LCMapStringA
SetFilePointer
FlushFileBuffers
ReadFile
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
GetStartupInfoA
GetLastError
ExitProcess
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
HeapCreate
GetStdHandle
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy

user32

MoveWindow
GetSystemMetrics
OffsetRect
GetWindowRect
PostQuitMessage
EndDialog
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
CreateDialogParamA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
IsDialogMessageA
wsprintfA
SetDlgItemTextA
SetTimer
GetDlgItemTextA
DefWindowProcA
MessageBoxA

comctl32

ord17

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66169b17d56a477ef905940d014d47ad

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 1KB