7637bff2147c5bfa28130ae30a94da028ec28020b56d51d45c57f809d32462bc

Sharing

Copy URL Twitter E-mail

General

Target

7637bff2147c5bfa28130ae30a94da028ec28020b56d51d45c57f809d32462bc
Size

628KB
MD5

b914b8227a6eca1ad26f0146b1d3e9fc
SHA1

76358193409258b21fc44b297047b4d94571c38d
SHA256

7637bff2147c5bfa28130ae30a94da028ec28020b56d51d45c57f809d32462bc
SHA512

734a8677455908810237c077d77f2319893a4ec3414b4eaee670d6a02dee613eeae4080d44ffdcd5ffb244585e99b769bf8d0b0bd867ef2730f3c09fc4e1167a
SSDEEP

12288:7h4dFO+ShinguQHtwHQsH21KrMLFePv+v6jjl9uVU:7CPOIM8HxAeev6nGVU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7637bff2147c5bfa28130ae30a94da028ec28020b56d51d45c57f809d32462bc

Files

7637bff2147c5bfa28130ae30a94da028ec28020b56d51d45c57f809d32462bc
.exe windows:4 windows x86 arch:x86

65ff1bb03c143425bffdceefd118e01b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTextAttribute
GetStdHandle
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleScreenBufferInfo
GetNumberOfConsoleInputEvents
PeekConsoleInputA
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
DebugBreak
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetCPInfo
CompareStringA
CompareStringW
GetLastError
GetFileAttributesA
SetFilePointer
FlushFileBuffers
CloseHandle
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
HeapReAlloc
VirtualFree
VirtualAlloc
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
GetTimeZoneInformation
IsBadCodePtr
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
ReadFile
SetStdHandle
GetACP
GetOEMCP
CreateFileA
SetEnvironmentVariableA
SetEndOfFile
GetLocaleInfoW
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
WriteConsoleA

user32

MessageBoxA

Sections

.text
Size: 536KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65ff1bb03c143425bffdceefd118e01b

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 536KB - Virtual size: 533KB

.rdata Size: 36KB - Virtual size: 34KB

.data Size: 28KB - Virtual size: 33KB

.idata Size: 4KB - Virtual size: 2KB

.reloc Size: 20KB - Virtual size: 17KB

.text
Size: 536KB - Virtual size: 533KB

.rdata
Size: 36KB - Virtual size: 34KB

.data
Size: 28KB - Virtual size: 33KB

.idata
Size: 4KB - Virtual size: 2KB

.reloc
Size: 20KB - Virtual size: 17KB