aa7838808b8a9f362d7b323c42d028b0

Sharing

Copy URL Twitter E-mail

General

Target

aa7838808b8a9f362d7b323c42d028b0
Size

126KB
MD5

aa7838808b8a9f362d7b323c42d028b0
SHA1

203c724dcac3cf455ca3ca8a1c81b2eb97211651
SHA256

8bf12f7b53ae5237a497e5b9dfb2a9c13b4a5d7a03ed71b7c667908840ff939e
SHA512

21038494baead710e78abf577172339fb0c2d156b132b876ed39f0b40c08d80191d887ca4f9d96334c909fa430ab33f2f1011f5bbcde58a36feaa26c14c26090
SSDEEP

3072:/2NS8Sy4Vmr7amCPblOAet7ZYJCMiJ1dVRypGBkPEeB:rUPg0A67YCNVq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa7838808b8a9f362d7b323c42d028b0

Files

aa7838808b8a9f362d7b323c42d028b0
.exe windows:4 windows x86 arch:x86

2359441e1ce28a82e2d1011a01209741

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
LoadLibraryA
GetSystemDefaultLangID
lstrlenW
SizeofResource
GetUserDefaultLCID
ResetEvent
LocalFree
lstrcmpiA
GetModuleHandleA
SetEvent
ReadFile
SetThreadLocale
GetFullPathNameA
SetLastError
LoadResource
LockResource
GetLastError
GetStringTypeA
GetCurrentProcessId
GetStringTypeW
SetErrorMode
HeapFree
CreateThread
VirtualAllocEx
GetFileType
GlobalAddAtomA
GetOEMCP
EnumCalendarInfoA
VirtualFree
FreeLibrary
WaitForSingleObject
MoveFileA
DeleteFileA
GetModuleFileNameA
GetDiskFreeSpaceA
GlobalAlloc
Sleep
CreateEventA
lstrcpyA
GetLocaleInfoA
GetStdHandle
DeleteCriticalSection
GetCommandLineW
IsBadReadPtr
GlobalDeleteAtom
IsBadHugeReadPtr
MoveFileExA
ExitProcess
GetCurrentThread
GetModuleHandleW
SetEndOfFile
LocalReAlloc
RaiseException

user32

GetClipboardData
GetSysColorBrush
GetDC
GetCursorPos
GetMenu
GetCursor
LoadBitmapA
KillTimer

comctl32

ImageList_Add
ImageList_Write
ImageList_DragShowNolock
ImageList_Read

advapi32

RegCreateKeyExA
RegDeleteValueA
RegLoadKeyA

Exports

Exports

K2VkN7PBHe_
H6CyNUHYz@8
CLbsUQaLmt
_5tTVyfF8
yjuj3Jz
_wD2QW_yKbxoIh@24
JaVQKmQZ1EHrKj
uu1bp7@16
kuGoG_EeSAT@16
xBBN3kOVr
qJlORQ7D
_gw1IHkfLas3M1
ClWQh
_Gvw8MxinRpcP@12
BUDmpgQ_AVAixc@8
DYDxIovB9WLlR@16
E__29V
Hucj0F1@8
5PNf0
_sqeiNVvCjDU
_co2mPnL@20
6BYWT
_guTeU0P0Ap5MhN@16
_n8NM8B3tQ7YEc@16
Jt5cd9Cq@24
_Xqa289K
_9A4VD@24
_RUabGt@16
_JcqrNbI@8
_YV9y5@12
Ewh7fhNbfF@12
pQPV8i
5dTD_TxXpfNSw
ADeMjjg@20
_qKk7OsDDca@24
_9lfZqaVcmWd2QE
SVD5OV1pt9@16
_A6_1Pi85UYty3@20
_P9xUBLq@20
VMolfLb0jZmEx@4
_lhbAKyo21U
KdGj1mN82@12
Xi9FU8is5gA9RZ
_KHNrxJBP93Oas
6rWhymtl5ypziC@12
yeYL85t7axLC8
_lx3kPIa_8
_1Z5iqJLdrCchPV
_nm2Exb0I
5B8vNLAIF
_ZDPbfXtiG@12
_b9Zbj8Xiyh
1XtiHTha
_8Z9TL0CB8W9c1z
_Oh_6D4sKftrl@8
ck0OCiRyx2n0ag@20
_mt3Qpch
_Cr94wI
_YVrxBoQXI7erH
_4m_Gem
1MCezviqt@8
3VCemWdI
EqghmE@12
yqfIH
JP5eGaDU8jelD

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 9KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kldata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2359441e1ce28a82e2d1011a01209741

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Exports

Exports

Sections

CODE Size: 14KB - Virtual size: 13KB

.DATA Size: 9KB - Virtual size: 101KB

.kldata Size: 96KB - Virtual size: 96KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 14KB - Virtual size: 13KB

.DATA
Size: 9KB - Virtual size: 101KB

.kldata
Size: 96KB - Virtual size: 96KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB