7cf3171db67f95dafccccdebd657cab606268dc84704dad1f168c533057c1a90N

General

Target

7cf3171db67f95dafccccdebd657cab606268dc84704dad1f168c533057c1a90N
Size

174KB
MD5

824fe0a451db07cd5d52227e05612600
SHA1

8f1b568d7beb8b67c53b01d34c578aaee4459fe4
SHA256

7cf3171db67f95dafccccdebd657cab606268dc84704dad1f168c533057c1a90
SHA512

21cd6ec5c69153a5351141b84db021caa421daaa24603557cbfc35978d560a3081054e4c62b546e38da08d75ccf8a40efdf93275ae2768684d569b5b39b66162
SSDEEP

3072:sPHCZRKkA3gjhw8LLzkDS17ANWvRD43YtvDM/7rOrp/oOPe3teA:s4KR3gjusv+SJxJs3asarpooedeA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7cf3171db67f95dafccccdebd657cab606268dc84704dad1f168c533057c1a90N

Files

7cf3171db67f95dafccccdebd657cab606268dc84704dad1f168c533057c1a90N
.exe windows:4 windows x86 arch:x86

30335547ec2aa552c385029dfe76d4c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

ole32

CoCreateInstance
CoTaskMemRealloc
CoUninitialize
CoRevokeClassObject
CoRegisterClassObject
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
StringFromCLSID

shlwapi

PathCombineW
PathFileExistsW

advapi32

RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW

kernel32

lstrcpyA
GetLastError
lstrcpyW
lstrcpyA
GetTickCount
WideCharToMultiByte
GetProcessId
InitializeCriticalSection
OutputDebugStringW
MultiByteToWideChar
FindClose
GetACP
EnumResourceNamesW
LockResource
GetCPInfo
GlobalAlloc
CreateFileMappingW
FreeEnvironmentStringsW
lstrlenW
lstrcmpiW
GlobalFree
GetModuleHandleW

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

DispatchMessageW
PostThreadMessageW
GetDC
TranslateMessage
CharNextW
wsprintfW
GetMessageW
SetTimer
CharUpperW
KillTimer
SendMessageA
UnregisterClassA

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30335547ec2aa552c385029dfe76d4c7

Headers

File Characteristics

Imports

ole32

shlwapi

advapi32

kernel32

oleacc

user32

Sections

.text Size: 103KB - Virtual size: 102KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 67KB - Virtual size: 66KB

.isete Size: 1024B - Virtual size: 120KB

.text
Size: 103KB - Virtual size: 102KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 67KB - Virtual size: 66KB

.isete
Size: 1024B - Virtual size: 120KB