7cbdc9fbfc47baafd18df788b0f14cb6bd2cbe01995a8f3ad5935e2b7ae3a56eN

General

Target

7cbdc9fbfc47baafd18df788b0f14cb6bd2cbe01995a8f3ad5935e2b7ae3a56eN
Size

156KB
MD5

19ea265ce6a3f0cff8569f87f9dd69c0
SHA1

627e0bbc19742d37fb8660d2ac4100079a656124
SHA256

7cbdc9fbfc47baafd18df788b0f14cb6bd2cbe01995a8f3ad5935e2b7ae3a56e
SHA512

f162521537ee3990a5daf5e09e7df29143b073bd47e74dff5a2eb177cb97610f9db9a2bdb645b129693c7315d49b7394e1f4e332e5666e3487bfb0116658ba45
SSDEEP

3072:ScKFBufqJoJdgoFdoPePbrpTWcQvq6i+:snuCuJRGPgbrpTWct6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cbdc9fbfc47baafd18df788b0f14cb6bd2cbe01995a8f3ad5935e2b7ae3a56eN

Files

7cbdc9fbfc47baafd18df788b0f14cb6bd2cbe01995a8f3ad5935e2b7ae3a56eN
.dll windows:4 windows x86 arch:x86

b9ac3bedaf7447518b91232149b8a89a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ReleaseDC
SetForegroundWindow
PtInRect
SetWindowPos
EnableScrollBar
TranslateMDISysAccel

kernel32

HeapCreate
GetLastError
WritePrivateProfileSectionW
HeapUnlock
FreeConsole
CompareStringA
TlsGetValue
GetNamedPipeHandleStateW
ReadConsoleOutputCharacterW
AreFileApisANSI
HeapValidate
GetStartupInfoW
GetFileType
SetTapeParameters
EnterCriticalSection
LoadLibraryExW
GetWindowsDirectoryW
DnsHostnameToComputerNameW
GetComputerNameA
TlsGetValue
GetSystemDirectoryA
DeleteTimerQueue
lstrcpyA
FlushConsoleInputBuffer
CompareFileTime
MapViewOfFile
GetCommMask
FindFirstChangeNotificationA

shlwapi

AssocQueryStringByKeyW
PathFindExtensionW
StrToInt64ExW

Exports

Exports

MountainSnapshot

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9ac3bedaf7447518b91232149b8a89a

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

shlwapi

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 56KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 40KB

.text
Size: 60KB - Virtual size: 56KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 40KB