b7191e82c71737bb57c62ba33d8038e2

Sharing

Copy URL Twitter E-mail

General

Target

b7191e82c71737bb57c62ba33d8038e2
Size

807KB
MD5

b7191e82c71737bb57c62ba33d8038e2
SHA1

1f2e81068929a88eaf0e36d2a5403d32e9ca6c01
SHA256

7915cf7dd1f812165eeabd96d7d87a0f3f839d6b0e1cf188fa9dbf293458900f
SHA512

4d07b75d6d6b7edd004e174b923d0997ee751d4da6a056538abdbe132a2cb5e14a95db1e88b91f9b0aefe3d9433f21a80cbf1173719a098a45ea6bf85fd159a8
SSDEEP

12288:QiDZtcTpf6eGvJPd3P71HDkOfeXoiEeAI7kB44M280kKgxm:QiVtA6ekJPbHDLGP7x4NFkKB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7191e82c71737bb57c62ba33d8038e2

Files

b7191e82c71737bb57c62ba33d8038e2
.exe windows:5 windows x86 arch:x86

88cbb61e47011e0a853a4d9f2f5754e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetModuleFileNameW
GetModuleFileNameW
GetModuleHandleW
CreateEventW
EnterCriticalSection
LocalAlloc
DisableThreadLibraryCalls
InitializeCriticalSection
lstrlenA
lstrcmpiW
GetCurrentThreadId
GetSystemTimeAsFileTime
HeapAlloc
VirtualProtect
InterlockedExchange
GetModuleHandleW
GetVersionExA
InterlockedCompareExchange
DisableThreadLibraryCalls
InterlockedIncrement
ReadFile
LoadLibraryW
CloseHandle
CreateThread
GetModuleFileNameW
LoadLibraryA
VirtualProtect
GetVersionExA
LocalFree
HeapAlloc
lstrlenA
Sleep
CloseHandle
GetCurrentProcess
GetCurrentThreadId
MultiByteToWideChar
VirtualProtect
LocalAlloc
GetCurrentProcessId
lstrcmpiW
GetProcessHeap
LeaveCriticalSection
lstrcmpiW
GetModuleFileNameW
InterlockedCompareExchange
VirtualAlloc
Sleep
UnhandledExceptionFilter
GetSystemTimeAsFileTime
InterlockedCompareExchange
GetTickCount
GetProcessHeap

advapi32

CryptSetProviderExA
EnumServiceGroupW
LsaEnumerateAccountRights
SystemFunction013
MakeSelfRelativeSD
LsaCreateSecret
LsaOpenAccount
AddAccessAllowedObjectAce
LsaFreeMemory
GetSecurityDescriptorGroup
CloseServiceHandle
WmiNotificationRegistrationA
RegSetValueA
FileEncryptionStatusA
GetSidLengthRequired
InitializeSid
SetEntriesInAuditListW
LsaQueryInformationPolicy
ElfOldestRecord
LsaEnumeratePrivileges
SetTraceCallback
MakeAbsoluteSD
EnumDependentServicesW
BuildTrusteeWithSidA
LsaCreateTrustedDomainEx
GetServiceDisplayNameA
SetUserFileEncryptionKey
GetServiceDisplayNameW
LsaSetDomainInformationPolicy
BuildTrusteeWithSidW
AccessCheckByType
LsaSetInformationTrustedDomain
QueryServiceConfigW
LsaRemovePrivilegesFromAccount
CryptDeriveKey
DecryptFileW
AddAccessAllowedAce
AllocateAndInitializeSid
RegDeleteValueW
ElfBackupEventLogFileA
AccessCheckByTypeResultListAndAuditAlarmA
LsaLookupPrivilegeValue
CryptDestroyHash
WmiExecuteMethodW
GetSecurityInfoExA
GetUserNameA
CreateTraceInstanceId
WmiDevInstToInstanceNameW
SystemFunction030
MakeAbsoluteSD
RegSaveKeyW
QueryServiceLockStatusW
SetFileSecurityA
StartTraceA
EncryptionDisable

user32

LoadIconW
SetWindowPos
LoadStringW
SetWindowLongW
DefWindowProcW
LoadStringW
EndPaint
PostQuitMessage
DialogBoxParamW
GetWindowLongW
GetDlgItem
SendDlgItemMessageW
GetDesktopWindow
MessageBoxW
PostQuitMessage
EnableWindow
InvalidateRect
DestroyWindow
PostMessageW
ReleaseDC
SetWindowPos
EndDialog
IsDlgButtonChecked
ReleaseDC
BeginPaint
MessageBoxW
SetDlgItemTextW
KillTimer
wsprintfA
GetDesktopWindow
GetSystemMetrics
DestroyWindow
EndDialog
SetFocus
wsprintfA
PostQuitMessage
MessageBoxW
InvalidateRect
CreateWindowExW
SetTimer
DispatchMessageW
GetFocus
BeginPaint
ShowWindow
SendDlgItemMessageW
EndDialog
LoadCursorW

gdi32

SelectObject
CreateRectRgn
GetBrushOrgEx
CreateDIBitmap
CreateSolidBrush
SetTextColor
RoundRect
GetWindowOrgEx
Rectangle
CreatePen
SetWindowOrgEx
BitBlt
SetWindowOrgEx
Ellipse
CombineRgn
SetTextColor
SelectObject
SetPixel
CreateBitmap
CreateBitmap
CreateBitmap
LineTo
GetCurrentObject
CreateFontA
CreateFontIndirectA
BitBlt
CreateBitmapIndirect
GetBkColor
CreateRectRgn
LineTo
GetPixel
CreateRectRgn
CreateFontA
GetWindowExtEx
GetCurrentObject
CreateFontIndirectA
CreateFontIndirectA
GetBkColor
CreateSolidBrush
SetPixel
SetBkColor
Rectangle
GetBkMode
GetPixel
StretchBlt
SetPixel
GetWindowExtEx
GetBkColor
GetBkMode
GetBkMode

Sections

.text
Size: 719KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88cbb61e47011e0a853a4d9f2f5754e3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

Sections

.text Size: 719KB - Virtual size: 968KB

.data Size: - Virtual size: 4KB

.rdata Size: 5KB - Virtual size: 8KB

.rsrc Size: 82KB - Virtual size: 84KB

.text
Size: 719KB - Virtual size: 968KB

.data
Size: - Virtual size: 4KB

.rdata
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 82KB - Virtual size: 84KB