2025-01-16_d217fb1a22517e5a4a4e7efe5c1cdeb1_spora

General

Target

2025-01-16_d217fb1a22517e5a4a4e7efe5c1cdeb1_spora
Size

253KB
MD5

d217fb1a22517e5a4a4e7efe5c1cdeb1
SHA1

9223ef6c3bf239ce77d35ea250747028b6ae14d3
SHA256

28237a1bab2d039c53282f718bb2f389daccf6aed27e279e879b2d0269252287
SHA512

d7e00af1f6412476b5be38d9aa34bf98d6447b6a1ffbab788e531c1a94371fc87e94af7bae79e49f647dfaf3a11ee06f088f5130270d51a6c635430f68278b31
SSDEEP

6144:/VpsZjPwS/DuL8f8aUChN9lCKF6r2UfzJ:sjPlRf8aUm6rFf1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-01-16_d217fb1a22517e5a4a4e7efe5c1cdeb1_spora

Files

2025-01-16_d217fb1a22517e5a4a4e7efe5c1cdeb1_spora
.exe windows:4 windows x86 arch:x86

f1698fe31c5b273ce40389d72b41ff81

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHCreateDirectoryExA
SHGetDataFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SheChangeDirA
ExtractIconW
SHQueryRecycleBinA
ShellAboutW
SHGetMalloc
ShellExecuteW
PathIsSlowW
DragQueryFileA
SHGetSettings
SHGetFileInfoA
SHFree
StrStrW

kernel32

GetSystemTime
GetCommandLineA
CopyFileA
InterlockedIncrement
GetStringTypeA
CreateJobObjectA
WriteConsoleW
FindAtomA
WriteProcessMemory
GetCurrentThreadId
FindVolumeClose
GetLogicalDriveStringsA
CreateMailslotW
SetCurrentDirectoryA
OpenMutexA
CreateMutexW
GetFullPathNameA
GetModuleHandleA
GetCurrentThreadId
OpenThread
GetVolumeInformationW
CompareStringA
CreateDirectoryA
GetProcAddress
WaitForSingleObject
FindVolumeClose
OpenWaitableTimerW
GetCurrentProcess
FileTimeToSystemTime
GetNumberFormatW
GetShortPathNameA
CreateFileW
GetDateFormatW
GetEnvironmentStringsA
GetPrivateProfileStringW
OpenJobObjectA

certcli

CAEnumFirstCA
CACloseCA
CAEnumNextCA
CACloseCertType

Exports

Exports

ms32er
uko

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1698fe31c5b273ce40389d72b41ff81

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

certcli

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 220KB - Virtual size: 217KB

We care about your privacy.

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 220KB - Virtual size: 217KB