7741d3ee3e1f9d556835ceb936714c86d61dab4c38dd0a7afb393fdb89b3807d

General

Target

7741d3ee3e1f9d556835ceb936714c86d61dab4c38dd0a7afb393fdb89b3807d
Size

574KB
MD5

b110a0b48d8b758bc6227ae6d12efc2b
SHA1

239e471b867eb77338e4c1284314afbca66096b1
SHA256

7741d3ee3e1f9d556835ceb936714c86d61dab4c38dd0a7afb393fdb89b3807d
SHA512

ca5da1d547845b37c2349fdc9e1b44db7f23a58958d0d93a57e3fa28843c28d6457caeb7af570660085e3efb0c64904126e5be592f20a2b900bb3e2852845b6b
SSDEEP

3072:WBCq2QY9R/dMMMMMM2MMMMMWZPopZ4WP:WBf29RVMMMMMM2MMMMMWPopZ4WP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7741d3ee3e1f9d556835ceb936714c86d61dab4c38dd0a7afb393fdb89b3807d

Files

7741d3ee3e1f9d556835ceb936714c86d61dab4c38dd0a7afb393fdb89b3807d
.exe windows:5 windows x86 arch:x86

ef0e5af70fb8ac23dd9989b08eacfba8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msimn.pdb

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_vsnwprintf
_vsnprintf

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

GetModuleFileNameA
GetVersionExA
lstrcpynA
GetEnvironmentVariableA
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrlenA
lstrlenW
GetLastError
ExpandEnvironmentStringsW
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetCurrentProcess
GetProcAddress
GetModuleHandleA
ReleaseMutex
GetFileAttributesA
FreeLibrary
LoadLibraryA
CreateMutexA
GetStartupInfoW

user32

MessageBoxA
LoadStringA
SendMessageTimeoutA
SetForegroundWindow
GetWindowThreadProcessId

shlwapi

SHSetValueA
ord157
SHGetValueA
StrCmpIW
ord67
StrStrIA
PathRemoveFileSpecA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 562KB - Virtual size: 562KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ef0e5af70fb8ac23dd9989b08eacfba8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

advapi32

kernel32

user32

shlwapi

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 1012B

Size: 562KB - Virtual size: 562KB

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 1012B