7c97ce1aa24b697d3a3212d9dfbbaa4157d4a478a5ecbe8fca9dc59e57fb7194

Sharing

Copy URL Twitter E-mail

General

Target

7c97ce1aa24b697d3a3212d9dfbbaa4157d4a478a5ecbe8fca9dc59e57fb7194
Size

492KB
MD5

789dabcdac434cc715ed0ecd76956c63
SHA1

dabf930e58f52e0c4e0461253cade3dcd92544cb
SHA256

7c97ce1aa24b697d3a3212d9dfbbaa4157d4a478a5ecbe8fca9dc59e57fb7194
SHA512

843d356d91f721757f359f18c921b4daac0ee3922f8a67220775c94ce9c5aa351bcbd19818a1967ae56cfc5efd5d2b3726143a1b4735bc1438d24e64579d5f6b
SSDEEP

6144:VLODHUqM6YpRHUS3WurJtXuPQZAr3UrYQ7/tgh:t2HUGYSPAAr3U0utgh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c97ce1aa24b697d3a3212d9dfbbaa4157d4a478a5ecbe8fca9dc59e57fb7194

Files

7c97ce1aa24b697d3a3212d9dfbbaa4157d4a478a5ecbe8fca9dc59e57fb7194
.dll windows:4 windows x86 arch:x86

796b39721923d8879d7e777c0c9631d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetLastError
GetLastError
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GlobalDeleteAtom
GlobalAlloc
GlobalLock
GetCurrentThreadId
GetCurrentThread
SizeofResource
LockResource
LoadResource
CloseHandle
LoadLibraryA
LocalAlloc
LocalFree
LeaveCriticalSection
GlobalReAlloc
GlobalUnlock
GlobalHandle
EnterCriticalSection
TlsGetValue
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
GlobalFree
TlsFree
InterlockedDecrement
SetErrorMode
InterlockedIncrement
GlobalFlags
RaiseException
GetVersionExA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
GetCommandLineA
ExitProcess
RtlUnwind
TerminateProcess
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsBadWritePtr
SetUnhandledExceptionFilter
GetOEMCP
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
LCMapStringA
SetStdHandle
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
CompareStringA
FreeLibrary
GetLocaleInfoA
GetACP
InterlockedExchange

comctl32

ord17

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantClear
VariantChangeType
VariantInit

advapi32

RegCloseKey

user32

IsIconic
SystemParametersInfoA
AdjustWindowRectEx
GetMenu
GetClientRect
SetForegroundWindow
MapWindowPoints
GetMessagePos
GetMessageTime
GetWindowPlacement
GetTopWindow
GetForegroundWindow
GetCapture
DestroyMenu
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
CopyRect
SetWindowPos
ShowWindow
GetDlgItem
GetSystemMetrics
GetSysColorBrush
GetMenuItemID
GetSubMenu
GetSysColor
ReleaseDC
GetDC
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetLastActivePopup
IsWindowEnabled
GetMenuItemCount
UnhookWindowsHookEx
SetMenuItemBitmaps
GetFocus
GetParent
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
DestroyWindow
CallNextHookEx

gdi32

SetBkColor
RestoreDC
DeleteObject
SetTextColor
SetMapMode
GetClipBox
SaveDC
CreateBitmap
GetDeviceCaps
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
RectVisible
PtVisible

winspool.drv

ClosePrinter

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 344KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

796b39721923d8879d7e777c0c9631d9

Headers

File Characteristics

Imports

kernel32

comctl32

shlwapi

oleaut32

advapi32

user32

gdi32

winspool.drv

Sections

.text Size: 92KB - Virtual size: 90KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 344KB - Virtual size: 341KB

.reloc Size: 20KB - Virtual size: 18KB

.text
Size: 92KB - Virtual size: 90KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 344KB - Virtual size: 341KB

.reloc
Size: 20KB - Virtual size: 18KB