7af043cc45ef6627472c9260e57bb64310d5f0c2d29c5aaca0736ab55f9d090e

Sharing

Copy URL Twitter E-mail

General

Target

7af043cc45ef6627472c9260e57bb64310d5f0c2d29c5aaca0736ab55f9d090e
Size

4.8MB
MD5

4c233d1cf9cdf21b9e1f2ff720147a7c
SHA1

97ea1d654ee9c403c86c4c3d61b3b4e21ee263ba
SHA256

7af043cc45ef6627472c9260e57bb64310d5f0c2d29c5aaca0736ab55f9d090e
SHA512

76a6655c2b3852c2605f23f623751ad783ae35030f87bef48aee498bbbed04aba889a6b0bfb3f7ce641de57f8f08db6791113813d4eb9f54083cc5dce2bd010e
SSDEEP

98304:AO4y+zC7pWsIfXA7EF5Ow0upQwwq5SWd46aK6NfmXA3X09rlWssZn:A4uWlIb5PnwZWd426NuXA3X09rl6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7af043cc45ef6627472c9260e57bb64310d5f0c2d29c5aaca0736ab55f9d090e

Files

7af043cc45ef6627472c9260e57bb64310d5f0c2d29c5aaca0736ab55f9d090e
.exe windows:6 windows x86 arch:x86

700d3703a397d9c33bb539b8bf02acbf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
SizeofResource
WriteProcessMemory
GetCurrentProcess
EnumResourceTypesW
WriteFile
VirtualAlloc
TerminateProcess
GetModuleFileNameW
FindResourceA
ResumeThread
Sleep
GetTempPathA
CreateFileA
LoadLibraryA
LockResource
CloseHandle
LoadResource
GetThreadContext
GetProcAddress
VirtualAllocEx
WideCharToMultiByte
CreateProcessA
SetThreadContext
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
UnhandledExceptionFilter

shell32

ShellExecuteExA

msvcp140

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?good@ios_base@std@@QBE_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z

vcruntime140

memcpy
__current_exception
memset
__std_terminate
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
_except_handler4_common
strrchr
__current_exception_context
_CxxThrowException
memmove

api-ms-win-crt-stdio-l1-1-0

ftell
__p__commode
fread
fopen_s
_set_fmode
fseek
fclose

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-runtime-l1-1-0

_cexit
_c_exit
_register_thread_local_exe_atexit_callback
__p___argc
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_exit
_initialize_onexit_table
_register_onexit_function
exit
_controlfp_s
terminate
_initialize_narrow_environment
_crt_atexit
_get_initial_narrow_environment
_initterm_e
__p___argv
_initterm
_set_app_type
_seh_filter_exe

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
free
_callnewh

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14.6MB - Virtual size: 14.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

700d3703a397d9c33bb539b8bf02acbf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

msvcp140

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 14.6MB - Virtual size: 14.6MB

.reloc Size: 1024B - Virtual size: 828B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 14.6MB - Virtual size: 14.6MB

.reloc
Size: 1024B - Virtual size: 828B