7e118e197083995bf706d69906e883af[.]bin

Sharing

Copy URL Twitter E-mail

General

Target

7e118e197083995bf706d69906e883af.bin
Size

457KB
MD5

7e118e197083995bf706d69906e883af
SHA1

9b416888cbe8fc86b2efa5e206b3bc401e980d03
SHA256

bf49e8d42678871d0b44c906e95a48b6dece32fd168668153faba5ca32485ceb
SHA512

009f1aa1be541babacc767e267b8fda2d782f754b2dc789c54b4628534c3aabfeeaafc309d1d63c890d6a4c89b62c2f47a8590b33ecc75a0b8cd70b92c195590
SSDEEP

12288:c+uQicLM/C+cmXX1RXYoIINu6NtdFcBWg33rJBo3:cJQDLMFTg2IwUlr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e118e197083995bf706d69906e883af.bin

Files

7e118e197083995bf706d69906e883af.bin
.exe windows:4 windows x86 arch:x86

a73344e8a7774b31e54a0fba013fb9fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetCurrentThreadId
Sleep
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryA
GetLastError
GetModuleHandleA
GetSystemInfo
LocalAlloc
LocalFree
InterlockedExchange
GetTickCount
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GlobalGetAtomNameA
GetSystemTimeAsFileTime
CloseHandle
HeapFree
GetComputerNameA
GetDiskFreeSpaceA
GlobalMemoryStatus
GetLocalTime
HeapAlloc
GetProcessHeap
DeviceIoControl
GetModuleHandleW
GetVersionExA
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetUnhandledExceptionFilter
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
FatalAppExitA
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetConsoleCtrlHandler

user32

GetKeyState
KillTimer
SendMessageA
SetTimer
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
PostMessageA

msimg32

TransparentBlt

gdi32

GetFontData

advapi32

RegCreateKeyExA
GetUserNameA
RegCloseKey
RegSetValueExA
RegQueryValueExA

Sections

.text
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 549KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a73344e8a7774b31e54a0fba013fb9fb

Headers

File Characteristics

Imports

kernel32

user32

msimg32

gdi32

advapi32

Sections

.text Size: 304KB - Virtual size: 303KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 144KB - Virtual size: 549KB

.rsrc Size: 5KB - Virtual size: 8KB

.text
Size: 304KB - Virtual size: 303KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 144KB - Virtual size: 549KB

.rsrc
Size: 5KB - Virtual size: 8KB