7b6fe25667789ac303e109f98df65a70N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

7b6fe25667789ac303e109f98df65a70N.exe
Size

266KB
MD5

7b6fe25667789ac303e109f98df65a70
SHA1

a710b4a7b0e80ebe22d84a3ed841867e0f15f0a2
SHA256

3419f0b102888fe75c061ed55803ac9c70fa67fa4872c0857096d6931f88ecf3
SHA512

e90ab7e5cd9cbbd75ab7ed75e9948b0d0099ba92b4b519cc10651605601e1148f845fd598336ffaebdf81262fd5f9e675f1a01e1c2bead7b32a9a9de0dff8630
SSDEEP

6144:wSfsh2JdmLUFT3tSNYMXC7/1afueNsTEY7XUx0/p:wS2Emgz7b1cu33XUx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b6fe25667789ac303e109f98df65a70N.exe

Files

7b6fe25667789ac303e109f98df65a70N.exe
.exe windows:4 windows x86 arch:x86

21213a9b7a4b3004b6bf78d100cde6ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

LoadAlterBitmap
PageSetupDlgW
ChooseColorA
GetSaveFileNameA
ChooseFontA
GetFileTitleA
ReplaceTextW
GetOpenFileNameA
GetFileTitleW
FindTextW
ReplaceTextA

user32

TranslateAccelerator
DialogBoxIndirectParamA
GrayStringW
wvsprintfA
GetClassNameW
GetClassLongW
GetInputState
GetPropW
DdeSetQualityOfService
DestroyCaret
CloseDesktop
DrawFocusRect
OpenClipboard
DrawAnimatedRects
GetMenuState
EnumDesktopsW
MessageBoxA
RegisterClassA

shell32

CheckEscapesW
SHFileOperation
SHFormatDrive
SHGetFileInfoA

gdi32

GetBitmapBits
GetTextFaceW
CreateFontIndirectW
GetCharWidthFloatA
SetViewportOrgEx
SaveDC
SetGraphicsMode
SetMetaFileBitsEx
GdiFlush
CloseFigure
GetRasterizerCaps
GetROP2
ExtCreatePen
GetDCOrgEx

kernel32

VirtualQuery
ExitProcess
CompareStringW
InterlockedExchange
GetStringTypeW
FindFirstFileExW
CompareStringA
GetACP
GlobalLock
IsValidLocale
QueryPerformanceCounter
TlsAlloc
GetFileType
CreateFileW
DeleteCriticalSection
DeleteAtom
GetConsoleCursorInfo
GetWindowsDirectoryW
GetCommandLineW
TlsGetValue
GetStdHandle
GetStringTypeA
HeapSize
FreeEnvironmentStringsW
InterlockedIncrement
HeapFree
GetUserDefaultLCID
SetFileAttributesW
GetEnvironmentStringsW
EnumSystemLocalesA
GetModuleHandleW
GetCurrentProcessId
RtlUnwind
HeapAlloc
GetSystemTimeAsFileTime
GetTimeFormatA
GetAtomNameW
TlsSetValue
GetLocaleInfoA
GetCurrentThread
MultiByteToWideChar
LCMapStringA
GetOEMCP
SetHandleCount
UnhandledExceptionFilter
ExpandEnvironmentStringsW
GetLastError
VirtualFree
GetStringTypeExW
WideCharToMultiByte
GetLocaleInfoW
GetModuleFileNameA
FreeLibrary
SetLastError
LCMapStringW
GetCPInfo
InitializeCriticalSectionAndSpinCount
TlsFree
GetStartupInfoA
SetEnvironmentVariableA
HeapDestroy
HeapReAlloc
InterlockedDecrement
LeaveCriticalSection
GetStartupInfoW
GetTickCount
GetDateFormatA
HeapCreate
VirtualAlloc
TerminateProcess
GetProfileSectionA
IsValidCodePage
GetModuleHandleA
WriteFile
WaitForMultipleObjects
GetCurrentProcess
IsDebuggerPresent
CloseHandle
GetCurrentThreadId
GetModuleFileNameW
GetProcAddress
SetUnhandledExceptionFilter
Sleep
CreateThread
LoadLibraryA
GetComputerNameA
EnterCriticalSection
SetConsoleCtrlHandler
GetTimeZoneInformation

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21213a9b7a4b3004b6bf78d100cde6ff

Headers

File Characteristics

Imports

comdlg32

user32

shell32

gdi32

kernel32

Sections

.text Size: 123KB - Virtual size: 122KB

.data Size: 138KB - Virtual size: 138KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 123KB - Virtual size: 122KB

.data
Size: 138KB - Virtual size: 138KB

.rsrc
Size: 3KB - Virtual size: 3KB