7fe616d777a73ea81a5319d8955aa79a5bf9be2613124b6cf10cc1f0af2de619

General

Target

7fe616d777a73ea81a5319d8955aa79a5bf9be2613124b6cf10cc1f0af2de619
Size

134KB
MD5

43a408374713d45ef37e948c64c58bbf
SHA1

12a44531ede2a57e342b6f7b79d5973e8170e289
SHA256

7fe616d777a73ea81a5319d8955aa79a5bf9be2613124b6cf10cc1f0af2de619
SHA512

888994632f487558373db493ca3b14416280f4ccbfe5768ebcd1721fb968e5638043bcf0e4dbd637cf306d59929da44ec4c45718a1690dd8bf9263da2d5989d4
SSDEEP

3072:7YdJ1yQgT8RpGIIQ/IfaUYM3RPn84nGOXB9y4lAIqhm+jJLu151z:k3A8JnIyUYgRPn84nG3e7L+jJLuFz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7fe616d777a73ea81a5319d8955aa79a5bf9be2613124b6cf10cc1f0af2de619

Files

7fe616d777a73ea81a5319d8955aa79a5bf9be2613124b6cf10cc1f0af2de619
.exe windows:1 windows x86 arch:x86

bb672c8748bf30a5ee2fd933f225d6ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptStringToBinaryA

shlwapi

PathAddExtensionW
PathFileExistsW

user32

FindWindowW
GetDC
GetParent
LoadCursorW
LoadIconW
RegisterClassW
ReleaseDC

kernel32

CloseHandle
CreateMutexA
CreateMutexW
DeleteFileW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileTime
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTickCount
LoadLibraryA
LoadLibraryW
OpenProcess
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
lstrcatW
lstrcmpiW
lstrcpyW
lstrlenW
CreateFileW

advapi32

DuplicateTokenEx
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey

Sections

AUTO
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DGROUP
Size: 117KB - Virtual size: 355KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb672c8748bf30a5ee2fd933f225d6ae

Headers

File Characteristics

Imports

crypt32

shlwapi

user32

kernel32

advapi32

Sections

AUTO Size: 8KB - Virtual size: 8KB

DGROUP Size: 117KB - Virtual size: 355KB

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size:

.rsrc Size: 3KB - Virtual size:

AUTO
Size: 8KB - Virtual size: 8KB

DGROUP
Size: 117KB - Virtual size: 355KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size:

.rsrc
Size: 3KB - Virtual size: