a79a6d2c10cccad7c14b6b32d9ae3e4e63502a38b76e04267f556a03d62722b7[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

a79a6d2c10cccad7c14b6b32d9ae3e4e63502a38b76e04267f556a03d62722b7.exe
Size

208KB
MD5

08fe25ef86bd641550758e58b979cd0e
SHA1

61c4c5a35dfa270f3d21eacb179cb36fce26b62b
SHA256

a79a6d2c10cccad7c14b6b32d9ae3e4e63502a38b76e04267f556a03d62722b7
SHA512

1ce99c27295f51d16e587c35730d6fdffad17f684b67208a68aad5dad390e4e301404f469298c9acc2a5c345d7dee6d69c68397fcaa942de7b4265ed40a3f76a
SSDEEP

6144:XZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5O:JquCuygMQjd5vJIBP1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a79a6d2c10cccad7c14b6b32d9ae3e4e63502a38b76e04267f556a03d62722b7.exe

Files

a79a6d2c10cccad7c14b6b32d9ae3e4e63502a38b76e04267f556a03d62722b7.exe
.exe windows:4 windows x86 arch:x86

520c130e82cbe6120da2d52c754c2522

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
SetEvent
FindResourceA
GetLogicalDriveStringsW
CreateThread
GetModuleHandleA
GetSystemTime
GetProcAddress
DisconnectNamedPipe
lstrlenA
CreateMutexW
GlobalGetAtomNameA
lstrcat
SetCalendarInfoW
CreateFileMappingA
SetComputerNameW
GetThreadPriority
IsBadReadPtr
GetNumberFormatA
EndUpdateResourceA
OpenFile
GetAtomNameW
GetCurrentThread
CreatePipe
GetUserDefaultLangID
GetFileType
GetFullPathNameA
RemoveDirectoryW
FatalAppExitA
lstrlenW
GlobalDeleteAtom
FindAtomW
GetModuleFileNameW
FileTimeToDosDateTime
BeginUpdateResourceW
GetEnvironmentVariableA
GetWindowsDirectoryW
lstrcatA
GetNamedPipeInfo
GetModuleHandleW
GetCalendarInfoA
GetLongPathNameA
GetEnvironmentStringsW
GetExpandedNameW
GetLogicalDrives
GetCurrentDirectoryA
lstrcpyA
GetStringTypeW
SearchPathA
lstrlen
EnumDateFormatsA
IsDebuggerPresent
GetProcessHeaps
SetThreadPriority
GetTempPathW
CreateMutexA

user32

GetIconInfo
CreateDialogParamA
GetSubMenu
GetClassInfoA
CreateAcceleratorTableW
ChildWindowFromPoint
GetScrollPos
GetSystemMetrics
LoadIconW
BringWindowToTop
RegisterWindowMessageW
LoadImageW
CreateDialogIndirectParamA
CopyRect
GetWindowTextLengthA
GetSysColor

gdi32

CreateDCA
GetPolyFillMode
GetEnhMetaFileDescriptionW
SetWorldTransform
CreateMetaFileW
SetStretchBltMode
BeginPath
GetTextCharset
CreateColorSpaceA
SetViewportOrgEx
IntersectClipRect
Ellipse
GetMetaFileBitsEx
CreateMetaFileA
GetCharWidthW
PaintRgn
GetDeviceGammaRamp
CombineRgn
EnumICMProfilesW
PlayMetaFile
GetDCOrgEx

advapi32

RegOpenKeyA
RegDeleteValueW
RegOpenKeyA
RegCloseKey

shlwapi

StrFormatByteSizeA
PathCreateFromUrlA
SHRegSetPathW

opengl32

glReadBuffer

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.PwM
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.OwvyT
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MTxF
Size: 1KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XWRUxX
Size: 1KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YCYo
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tKhtUt
Size: 2KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

520c130e82cbe6120da2d52c754c2522

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

opengl32

Sections

.text Size: 12KB - Virtual size: 11KB

.PwM Size: 1KB - Virtual size: 10KB

.OwvyT Size: 3KB - Virtual size: 26KB

.MTxF Size: 1KB - Virtual size: 37KB

.XWRUxX Size: 1KB - Virtual size: 40KB

.data Size: 11KB - Virtual size: 11KB

.YCYo Size: 1KB - Virtual size: 8KB

.tKhtUt Size: 2KB - Virtual size: 221KB

.rsrc Size: 171KB - Virtual size: 170KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.PwM
Size: 1KB - Virtual size: 10KB

.OwvyT
Size: 3KB - Virtual size: 26KB

.MTxF
Size: 1KB - Virtual size: 37KB

.XWRUxX
Size: 1KB - Virtual size: 40KB

.data
Size: 11KB - Virtual size: 11KB

.YCYo
Size: 1KB - Virtual size: 8KB

.tKhtUt
Size: 2KB - Virtual size: 221KB

.rsrc
Size: 171KB - Virtual size: 170KB

.reloc
Size: 1KB - Virtual size: 1KB