7c077fb014f24a612acad88c971c0353dade8e11e48ac562227df654a972c581

Sharing

Copy URL Twitter E-mail

General

Target

7c077fb014f24a612acad88c971c0353dade8e11e48ac562227df654a972c581
Size

1.7MB
MD5

5c79c0f7b9605d880fbb05f26d9acb74
SHA1

846dabefa71eced7315e3c81878718abee07568b
SHA256

7c077fb014f24a612acad88c971c0353dade8e11e48ac562227df654a972c581
SHA512

e11be012924b5d7335017628cbfa4ec741f27e46f738df916157a8a4f6553d8df277ce04a34d8ba35c072e6604b41abf5a74ad86cd27610dd1c674c74fa175b3
SSDEEP

24576:ob1D11E72tByUU06PjQaB7hnBe1EACvrvI4CBX8U8Q3jMzlKUMavjrNs1Si:obwWyu6BB77mEVzvDUQKU1MSi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c077fb014f24a612acad88c971c0353dade8e11e48ac562227df654a972c581

Files

7c077fb014f24a612acad88c971c0353dade8e11e48ac562227df654a972c581
.exe windows:6 windows x64 arch:x64

0ea059a72794ae0ebd1b1ea6b7be605e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

Imports

kernel32

FindNextFileW

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW

api-ms-win-crt-runtime-l1-1-0

__p___argc

api-ms-win-crt-stdio-l1-1-0

__p__commode

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-string-l1-1-0

wcsnlen

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-locale-l1-1-0

__pctype_func

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-time-l1-1-0

_gmtime64_s

iphlpapi

GetInterfaceInfo

msvcrt

_wcsnicmp

psapi

GetMappedFileNameW

Sections

.text
Size: 70KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 266KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ea059a72794ae0ebd1b1ea6b7be605e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

shell32

advapi32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

iphlpapi

msvcrt

psapi

Sections

.text Size: 70KB - Virtual size: 432KB

.sedata Size: 1.3MB - Virtual size: 1.3MB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 266KB - Virtual size: 268KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 70KB - Virtual size: 432KB

.sedata
Size: 1.3MB - Virtual size: 1.3MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 266KB - Virtual size: 268KB

.sedata
Size: 4KB - Virtual size: 4KB