7f0a35ca554f145e54e2ac48a26f28c0N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

7f0a35ca554f145e54e2ac48a26f28c0N.exe
Size

4.7MB
MD5

7f0a35ca554f145e54e2ac48a26f28c0
SHA1

3d4a79b126a0b3a7c6bc811078c86731d9afcfe3
SHA256

1407d984e69539fc933d1985b72aa77a808ef8b8b80453f1296249083817f265
SHA512

d3e476242542885da1cc54633eff5858e61a2acc8ba1ed9583712bb0f8f7ccd8dc7358d892c1194a674c0bca6fbc8120254e1072adfc192bf13b906305aa6040
SSDEEP

98304:PkLiUV9YElhCjyydBdFtQSTZKG6WhazgOjdRoCRSWb:1UV9rOmrcvKRSO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f0a35ca554f145e54e2ac48a26f28c0N.exe

Files

7f0a35ca554f145e54e2ac48a26f28c0N.exe
.exe windows:5 windows x86 arch:x86

3a4b359f08363fd8f1cd242645fa7923

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Read
ImageList_DragShowNolock
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_SetIconSize
ImageList_Write
ord17
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_Destroy
ImageList_Create
ImageList_Remove
ImageList_BeginDrag

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

lstrcmpA
lstrcpyA
lstrcpynA
lstrlenA
MulDiv
MultiByteToWideChar
ReadFile
ReleaseMutex
ResetEvent
ResumeThread
SetCurrentDirectoryA
SetEndOfFile
LockResource
SetEvent
SetFileAttributesA
SetFilePointer
SetFileTime
SetLastError
SetThreadLocale
SizeofResource
Sleep
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteFile
HeapReAlloc
HeapAlloc
GetOEMCP
HeapFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentProcess
TerminateProcess
RtlUnwind
LocalFree
LocalAlloc
LoadResource
LoadLibraryExA
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
GlobalUnlock
GlobalReAlloc
GlobalMemoryStatus
GlobalLock
GlobalHandle
GlobalFree
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
GetSystemInfo
GetSystemDirectoryA
GetStringTypeExA
GetStdHandle
GetStartupInfoA
GetProfileStringA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLogicalDriveStringsA
GetLocalTime
GetLocaleInfoA
GetLastError
GetFullPathNameA
GetFileAttributesA
GetExitCodeThread
GetEnvironmentStrings
GetDriveTypeA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentProcessId
GetCurrentDirectoryA
GetCPInfo
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsA
FormatMessageA
FindResourceA
FindNextChangeNotification
FindFirstFileA
FindFirstChangeNotificationA
FindCloseChangeNotification
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitThread
ExitProcess
EnumCalendarInfoA
DosDateTimeToFileTime
DeviceIoControl
DeleteFileA
DeleteCriticalSection
CreateThread
CreateMutexA
LCMapStringW
CreateFileA
CreateEventA
CreateDirectoryA
CompareStringW
CompareStringA
CreateProcessA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
RaiseException
GetCommandLineA
GetVersion
GetThreadLocale
GetCurrentThreadId
GetStringTypeA
GetStringTypeW
LCMapStringA
SetErrorMode

user32

RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetCapture
SetClassLongA
SetClipboardData
SetCursor
SetFocus
SetForegroundWindow
SetMenuItemInfoA
SetParent
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
ShowCursor
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
TabbedTextOutA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
WaitMessage
WindowFromPoint
WinHelpA
wvsprintfA
LoadCursorA
LoadBitmapA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsRectEmpty
IsIconic
IsDialogMessageA
IsChild
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowDC
GetTopWindow
RedrawWindow
GetSystemMenu
GetSysColorBrush
PostMessageA
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropA
GetParent
GetMessagePos
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetLastActivePopup
GetKeyState
GetKeyNameTextA
GetKeyboardType
GetKeyboardState
GetKeyboardLayoutList
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetDCEx
GetCursorPos
GetClipboardData
GetClientRect
GetClassNameA
GetClassInfoA
GetCapture
GetActiveWindow
FrameRect
FindWindowA
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextA
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
MessageBoxA
BeginPaint
CallNextHookEx
CallWindowProcA
CharLowerA
CharLowerBuffA
CharNextA
CharToOemA
CharUpperBuffA
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreateWindowExA
CreatePopupMenu
CreateMenu
PtInRect
GetSystemMetrics
PostQuitMessage
CheckMenuItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CreateIcon
PeekMessageA
OpenClipboard
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MessageBeep
MapWindowPoints
MapVirtualKeyA
LoadStringA
LoadKeyboardLayoutA
GetSubMenu
LoadIconA
GetUpdateRect

gdi32

CreateICA
CreatePalette
CreatePenIndirect
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteEnhMetaFile
DeleteObject
Ellipse
EndDoc
EndPage
ExcludeClipRect
ExtFloodFill
ExtTextOutA
GdiFlush
GetBitmapBits
GetBkColor
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDeviceCaps
GetDIBColorTable
GetDIBits
GetEnhMetaFileBits
CreateHalftonePalette
GetEnhMetaFilePaletteEntries
GetObjectA
GetPaletteEntries
GetPixel
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextExtentPointA
GetTextMetricsA
GetWindowOrgEx
GetWinMetaFileBits
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
PlayEnhMetaFile
Polyline
RealizePalette
Rectangle
RectVisible
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetEnhMetaFileBits
SetMapMode
SetPixel
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
SetWinMetaFileBits
StartDocA
StartPage
StretchBlt
UnrealizeObject
CreateFontIndirectA
CreateDIBSection
CreateDIBitmap
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
GetEnhMetaFileHeader
CreateBrushIndirect

winspool.drv

EnumPrintersA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetSaveFileNameA
ChooseFontA
GetOpenFileNameA

advapi32

RegCreateKeyExA
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA
ShellExecuteExA

ole32

CoInitialize
CoTaskMemAlloc
CoUninitialize
OleInitialize
OleUninitialize
CoCreateInstance

oleaut32

VariantCopy
VariantChangeType
SysReAllocStringLen
SysFreeString
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantInit
VariantClear

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 996KB - Virtual size: 992KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vga9
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3a4b359f08363fd8f1cd242645fa7923

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 12KB - Virtual size: 4.0MB

.rsrc Size: 996KB - Virtual size: 992KB

.vga9 Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 12KB - Virtual size: 4.0MB

.rsrc
Size: 996KB - Virtual size: 992KB

.vga9
Size: 1.3MB - Virtual size: 1.3MB