2025-02-07_10188103ecbc13790580621c371e4c7b_spora

General

Target

2025-02-07_10188103ecbc13790580621c371e4c7b_spora
Size

253KB
MD5

10188103ecbc13790580621c371e4c7b
SHA1

86d11b19ce9662df85d197e8bef36860f665d491
SHA256

f0c7cb124cfcb9bcb74980b7197fde014efa442974db4d520e2f66c25c371471
SHA512

a3608f07f26a680baa430969389f97a23a50626dd831daf5cacc577b8cc67029290e45b4afd172de350165b8ab713393b281ab8a9402bfc676f27edfdaeb6ed0
SSDEEP

6144:YZpsZjPwS/DuL8f8aUChN9lCKF6r2Ufz/:DjPlRf8aUm6rFfb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-02-07_10188103ecbc13790580621c371e4c7b_spora

Files

2025-02-07_10188103ecbc13790580621c371e4c7b_spora
.exe windows:4 windows x86 arch:x86

f1698fe31c5b273ce40389d72b41ff81

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHCreateDirectoryExA
SHGetDataFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SheChangeDirA
ExtractIconW
SHQueryRecycleBinA
ShellAboutW
SHGetMalloc
ShellExecuteW
PathIsSlowW
DragQueryFileA
SHGetSettings
SHGetFileInfoA
SHFree
StrStrW

kernel32

GetSystemTime
GetCommandLineA
CopyFileA
InterlockedIncrement
GetStringTypeA
CreateJobObjectA
WriteConsoleW
FindAtomA
WriteProcessMemory
GetCurrentThreadId
FindVolumeClose
GetLogicalDriveStringsA
CreateMailslotW
SetCurrentDirectoryA
OpenMutexA
CreateMutexW
GetFullPathNameA
GetModuleHandleA
GetCurrentThreadId
OpenThread
GetVolumeInformationW
CompareStringA
CreateDirectoryA
GetProcAddress
WaitForSingleObject
FindVolumeClose
OpenWaitableTimerW
GetCurrentProcess
FileTimeToSystemTime
GetNumberFormatW
GetShortPathNameA
CreateFileW
GetDateFormatW
GetEnvironmentStringsA
GetPrivateProfileStringW
OpenJobObjectA

certcli

CAEnumFirstCA
CACloseCA
CAEnumNextCA
CACloseCertType

Exports

Exports

ms32er
uko

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1698fe31c5b273ce40389d72b41ff81

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

certcli

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 220KB - Virtual size: 217KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 220KB - Virtual size: 217KB