07cbc2c362b47e58e5c3653512ca5baf

Sharing

Copy URL Twitter E-mail

General

Target

07cbc2c362b47e58e5c3653512ca5baf
Size

202KB
MD5

07cbc2c362b47e58e5c3653512ca5baf
SHA1

6bb0cff44dce895ef133a299eabd53fed106deff
SHA256

7b0c389e0d6da8585f4093e2d90c31bf51ecea5b17360a83c592dfba7b0f1650
SHA512

7a149d9f88aa6b0fd4380724bc23c098b48f36642370dd2e47a643e97f42b648fe43a612e0ee54ea90a8a98cf95447d34d0ea917a9c9e96410f4065b712f6f53
SSDEEP

3072:hZSY3dw5yxq+7gEM1XZGqmGDC4Y/nDUKo0/DVpRDz:h3dm+7gEMfLmG3YXo0ZDz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07cbc2c362b47e58e5c3653512ca5baf

Files

07cbc2c362b47e58e5c3653512ca5baf
.exe windows:6 windows x64 arch:x64

b8c014472c949546b81e8c5bd91415ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleW
SetErrorMode
GetTempPathW
GetFileAttributesW
DeleteFileW
LoadLibraryW
FreeLibrary
WideCharToMultiByte
GetTickCount
WriteConsoleW
SetFilePointerEx
GetConsoleCP
FlushFileBuffers
GetConsoleMode
HeapReAlloc
HeapSize
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RaiseException
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
MultiByteToWideChar
GetACP
HeapFree
HeapAlloc
LCMapStringW
GetStringTypeW
GetFileType
CloseHandle
FindClose
FindFirstFileExW
FindNextFileW
CreateFileW

user32

GetMessageW
CreateWindowExW
EndDialog
SetThreadDesktop
LoadAcceleratorsW
LoadStringW
ShowWindow
DispatchMessageW
OpenDesktopA
TranslateAcceleratorW
TranslateMessage
LoadIconW
CreateDesktopA
DialogBoxParamW
UpdateWindow
BeginPaint
EndPaint
DefWindowProcW
RegisterClassExW
LoadCursorW

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8c014472c949546b81e8c5bd91415ce

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 95KB - Virtual size: 94KB

.rdata Size: 47KB - Virtual size: 47KB

.data Size: 3KB - Virtual size: 1.3MB

.pdata Size: 4KB - Virtual size: 3KB

.gfids Size: 512B - Virtual size: 160B

.rsrc Size: 48KB - Virtual size: 48KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 95KB - Virtual size: 94KB

.rdata
Size: 47KB - Virtual size: 47KB

.data
Size: 3KB - Virtual size: 1.3MB

.pdata
Size: 4KB - Virtual size: 3KB

.gfids
Size: 512B - Virtual size: 160B

.rsrc
Size: 48KB - Virtual size: 48KB

.reloc
Size: 2KB - Virtual size: 1KB