bf7f9b211f9af3073606d4f1dd6904ec

Sharing

Copy URL Twitter E-mail

General

Target

bf7f9b211f9af3073606d4f1dd6904ec
Size

72KB
MD5

bf7f9b211f9af3073606d4f1dd6904ec
SHA1

f97575a6594db2f4af78ee18297887f86d236741
SHA256

cff365bf28a243dea791fb57011388f2f14def115ffe636bd2f4bee0a7484072
SHA512

a74ffb8d3142d7e0e8818d1ad4bfa972eef81373372fe45040542cd4c4dbbd4c687723e583e7b97a98372e219e527576b7f392da2dc7f177a20bd1f74e909f3e
SSDEEP

1536:Fhv3MZWtPZrejbLWM39qGFr0dmi2E8VTRoo:FhaWtPZSf9oGWdPwRz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf7f9b211f9af3073606d4f1dd6904ec

Files

bf7f9b211f9af3073606d4f1dd6904ec
.exe windows:4 windows x86 arch:x86

4b5019d5e3dd81614f38c20dc5bfb945

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueW
RegOpenKeyExA
RegQueryInfoKeyW
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExW
RegDeleteValueA
RegEnumKeyExW
RegReplaceKeyW
RegQueryValueExW
RegLoadKeyW
RegCreateKeyExA
RegOpenKeyA
RegReplaceKeyA
RegDeleteKeyW
RegLoadKeyA
RegQueryValueA
RegEnumValueW
RegEnumValueA
RegEnumKeyExA
RegFlushKey
RegCreateKeyExW
RegGetKeySecurity
RegQueryValueW
RegCreateKeyW
RegQueryInfoKeyA
RegEnumKeyA
RegOpenKeyW
RegEnumKeyW
RegGetKeySecurity
RegFlushKey
RegQueryValueA
RegEnumKeyExW
RegOpenKeyA
RegOpenKeyExW
RegEnumValueA
RegDeleteKeyA
RegQueryValueW
RegEnumValueW
RegOpenKeyExA
RegReplaceKeyA
RegEnumKeyW
RegQueryInfoKeyW
RegEnumKeyA
RegOpenKeyW
RegCreateKeyExW
RegCreateKeyExA
RegCreateKeyW
RegLoadKeyW
RegEnumKeyExA
RegReplaceKeyW
RegQueryValueExA
RegLoadKeyA
RegDeleteValueW
RegDeleteValueA
RegQueryValueExW
RegQueryInfoKeyA
RegDeleteKeyW

kernel32

CloseHandle
HeapFree
CloseHandle
GetModuleHandleA
CloseHandle
lstrcpyA
CloseHandle
DeleteFileA
CloseHandle
GetCommandLineA
CloseHandle
lstrlenA
CloseHandle
lstrcmpiA
CloseHandle
lstrcpynA
CloseHandle

user32

GetFocus
GetDlgItem
CreateIcon
DrawTextW
IsMenu
CopyImage
AppendMenuW
GetWindowTextLengthA
CloseWindow
BlockInput
LoadMenuA
GetDC
GetMenu
DrawIcon
CalcMenuBar
DialogBoxParamW
IsWindow
CopyRect
DrawTextA
InsertMenuA
CopyIcon
EndDialog
DialogBoxParamA
LoadCursorA
GetWindowTextA
AlignRects
AppendMenuA
DrawIconEx
GetCursor

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rddta
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eadta
Size: 1KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idaaa
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b5019d5e3dd81614f38c20dc5bfb945

Headers

File Characteristics

Imports

advapi32

kernel32

user32

Sections

.text Size: 15KB - Virtual size: 14KB

.rddta Size: 45KB - Virtual size: 45KB

.eadta Size: 1KB - Virtual size: 43KB

.idaaa Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 15KB - Virtual size: 14KB

.rddta
Size: 45KB - Virtual size: 45KB

.eadta
Size: 1KB - Virtual size: 43KB

.idaaa
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 4KB