2025-01-17_9e51bc38676add03d3262277b4625864_spora

General

Target

2025-01-17_9e51bc38676add03d3262277b4625864_spora
Size

253KB
MD5

9e51bc38676add03d3262277b4625864
SHA1

6ff3d8ff3a47f5a4aeee55f61d1aed2a51222f0e
SHA256

5d15a34101639996dff944072dd23d1623bd233a1da75f76f23422b421a110c8
SHA512

6a3c5ad1f0b3ad41d63c7966f42881837eeca7ec7ac9167fe9b57f2a3415f21308024501fe4795595e28ed2f3b2ae97318860e0948f9aeb00baccf148d0dd252
SSDEEP

6144:YZpsZjPwS/DuL8f8aUChN9lCKF6r2Ufz6:DjPlRf8aUm6rFfe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-01-17_9e51bc38676add03d3262277b4625864_spora

Files

2025-01-17_9e51bc38676add03d3262277b4625864_spora
.exe windows:4 windows x86 arch:x86

f1698fe31c5b273ce40389d72b41ff81

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHCreateDirectoryExA
SHGetDataFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SheChangeDirA
ExtractIconW
SHQueryRecycleBinA
ShellAboutW
SHGetMalloc
ShellExecuteW
PathIsSlowW
DragQueryFileA
SHGetSettings
SHGetFileInfoA
SHFree
StrStrW

kernel32

GetSystemTime
GetCommandLineA
CopyFileA
InterlockedIncrement
GetStringTypeA
CreateJobObjectA
WriteConsoleW
FindAtomA
WriteProcessMemory
GetCurrentThreadId
FindVolumeClose
GetLogicalDriveStringsA
CreateMailslotW
SetCurrentDirectoryA
OpenMutexA
CreateMutexW
GetFullPathNameA
GetModuleHandleA
GetCurrentThreadId
OpenThread
GetVolumeInformationW
CompareStringA
CreateDirectoryA
GetProcAddress
WaitForSingleObject
FindVolumeClose
OpenWaitableTimerW
GetCurrentProcess
FileTimeToSystemTime
GetNumberFormatW
GetShortPathNameA
CreateFileW
GetDateFormatW
GetEnvironmentStringsA
GetPrivateProfileStringW
OpenJobObjectA

certcli

CAEnumFirstCA
CACloseCA
CAEnumNextCA
CACloseCertType

Exports

Exports

ms32er
uko

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1698fe31c5b273ce40389d72b41ff81

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

certcli

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 220KB - Virtual size: 217KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 220KB - Virtual size: 217KB