7a33c20ce262d9798779522abe22e83a665f8dea0611f8d9061748e9ea08d9c8N

General

Target

7a33c20ce262d9798779522abe22e83a665f8dea0611f8d9061748e9ea08d9c8N
Size

182KB
MD5

f774e0f1da35e15e6179257b5cfd6f50
SHA1

120b28d61629148382f425635075634c54f4429c
SHA256

7a33c20ce262d9798779522abe22e83a665f8dea0611f8d9061748e9ea08d9c8
SHA512

75d5e0abd54deaafe135528b9d1d0a699e57b26cc638f0de2f217666fe5dfcad77fd61c63b21262e715bb1ffce2d20156c78833ba5ceed81334d2721f87b0bd1
SSDEEP

3072:TVIEYU9jGlTHQFKFh9ToctUP+3IRqbJBkK3ukMkX9mxDYqsYFaYMDY90imWWmaCk:TVFYUhGlTwkX+ctSkIRqT3usNmx0qsYg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a33c20ce262d9798779522abe22e83a665f8dea0611f8d9061748e9ea08d9c8N

Files

7a33c20ce262d9798779522abe22e83a665f8dea0611f8d9061748e9ea08d9c8N
.exe windows:4 windows x86 arch:x86

f2edf4b6a8a1fa956a0debea4272294b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetFileInfoA
SHFileOperationA
SHGetPathFromIDListA

ole32

OleUninitialize
OleInitialize
CoCreateInstance
CoTaskMemFree

kernel32

DeleteFileA
FlushInstructionCache
GetWindowsDirectoryA
GetModuleHandleA
SetFilePointer
FindFirstFileA
ReadFile
GetProcAddress
GlobalAlloc
MulDiv
EnumResourceNamesW
WritePrivateProfileStringA
FindNextFileA
GetExitCodeProcess
SetupComm
LoadLibraryExA
WaitForSingleObject
WriteFile
MultiByteToWideChar
GetPrivateProfileStringA
FindClose
FreeLibrary
GlobalFree

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

comctl32

ImageList_Destroy
ImageList_Create
ImageList_AddMasked

rpcrt4

NdrComplexArrayFree
UuidCreate

advapi32

RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2edf4b6a8a1fa956a0debea4272294b

Headers

File Characteristics

Imports

shell32

ole32

kernel32

version

comctl32

rpcrt4

advapi32

Sections

.text Size: 107KB - Virtual size: 107KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 70KB - Virtual size: 70KB

.reloc Size: 1024B - Virtual size: 260KB

.text
Size: 107KB - Virtual size: 107KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 70KB - Virtual size: 70KB

.reloc
Size: 1024B - Virtual size: 260KB