2024-12-21_8213a711ac3c7739b99d45a04f412631_spora

General

Target

2024-12-21_8213a711ac3c7739b99d45a04f412631_spora
Size

253KB
MD5

8213a711ac3c7739b99d45a04f412631
SHA1

88f1fbedc3753ca548ee9ff868a2d77ec3bda4cf
SHA256

049f263536bab6fe11003bb9b07818d87bd67c7a6e06527ef460dfcb39e1859a
SHA512

dd0006219b5ddb3762f81768529c40311c95b3b54ead532bf55a4a41e5f4056ecfea562909bfe8f5a8b70e201f22d247bee6d965b6f2aea99cf5c3ec0234c4f3
SSDEEP

6144:m6psZjPwS/DuL8f8aUChN9lCKF6r2Ufz1:GjPlRf8aUm6rFfB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-12-21_8213a711ac3c7739b99d45a04f412631_spora

Files

2024-12-21_8213a711ac3c7739b99d45a04f412631_spora
.exe windows:4 windows x86 arch:x86

f1698fe31c5b273ce40389d72b41ff81

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHCreateDirectoryExA
SHGetDataFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SheChangeDirA
ExtractIconW
SHQueryRecycleBinA
ShellAboutW
SHGetMalloc
ShellExecuteW
PathIsSlowW
DragQueryFileA
SHGetSettings
SHGetFileInfoA
SHFree
StrStrW

kernel32

GetSystemTime
GetCommandLineA
CopyFileA
InterlockedIncrement
GetStringTypeA
CreateJobObjectA
WriteConsoleW
FindAtomA
WriteProcessMemory
GetCurrentThreadId
FindVolumeClose
GetLogicalDriveStringsA
CreateMailslotW
SetCurrentDirectoryA
OpenMutexA
CreateMutexW
GetFullPathNameA
GetModuleHandleA
GetCurrentThreadId
OpenThread
GetVolumeInformationW
CompareStringA
CreateDirectoryA
GetProcAddress
WaitForSingleObject
FindVolumeClose
OpenWaitableTimerW
GetCurrentProcess
FileTimeToSystemTime
GetNumberFormatW
GetShortPathNameA
CreateFileW
GetDateFormatW
GetEnvironmentStringsA
GetPrivateProfileStringW
OpenJobObjectA

certcli

CAEnumFirstCA
CACloseCA
CAEnumNextCA
CACloseCertType

Exports

Exports

ms32er
uko

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1698fe31c5b273ce40389d72b41ff81

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

certcli

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 220KB - Virtual size: 217KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 220KB - Virtual size: 217KB