b7176a9853f54dca7c5b4f220797ba70

General

Target

b7176a9853f54dca7c5b4f220797ba70
Size

113KB
MD5

b7176a9853f54dca7c5b4f220797ba70
SHA1

dfb4a62e9d46684b93fe3491db2c24b17f6bb209
SHA256

46b492220047f13e3e92ef8ebbf1d1d2e30b421e09bb181c141c637630a3494c
SHA512

da416d22a6a7eeb46430c6a5c1c80adbbe17789c82cdd8a5c8f71a18569ddbd713630d238aefc55bedc0b7ceb44b3a14b8ac2babf0bc74a7b23f90fd505a5ffa
SSDEEP

1536:ugwmAoPcANOUqoii+UOi8YZYx82+ZjmbHTJKqOo:MmAokeqoQ88dwm7TJK5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7176a9853f54dca7c5b4f220797ba70

Files

b7176a9853f54dca7c5b4f220797ba70
.exe windows:4 windows x86 arch:x86

598639095b2ecae3c8b725b285032df1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
ReadFile
GetFileSize
DeleteFileA
WritePrivateProfileStringA
lstrcatA
GetEnvironmentVariableA
lstrcpyA
GetCurrentDirectoryA
GetStringTypeA
LockResource
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
CreateFileA
WriteFile
lstrlenA
GetStdHandle
SetHandleCount
CloseHandle
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeW

user32

MessageBoxA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
PeekMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
GetWindowTextA

gdi32

SetBkMode
TextOutA

comdlg32

GetOpenFileNameA

comctl32

ord17

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

598639095b2ecae3c8b725b285032df1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

comctl32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 94KB - Virtual size: 93KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 94KB - Virtual size: 93KB