a7c2cc09a257330f28afa236dda6daea6513b146a96cc6ed75e6133372ec1eb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7c2cc09a257330f28afa236dda6daea6513b146a96cc6ed75e6133372ec1eb9
Size

264KB
MD5

0acf21577b553f20b810d108291d069f
SHA1

328f0fb72d57d4b02286048f2c106f0ef162596d
SHA256

a7c2cc09a257330f28afa236dda6daea6513b146a96cc6ed75e6133372ec1eb9
SHA512

80362752390b992d6b0819d4bd77152b02f592facfaceee8ec11747d19d21b651bc996981f7fe5fd0ae2bce0abf7bc575e2fddb0825f5dabf512f633b3712dc3
SSDEEP

6144:iZShaiX7y+ioeR7l84UAf2TFZ0V9hqjwNfjLxyu0v:eS4MeR+4/fCy16GrV/0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7c2cc09a257330f28afa236dda6daea6513b146a96cc6ed75e6133372ec1eb9

Files

a7c2cc09a257330f28afa236dda6daea6513b146a96cc6ed75e6133372ec1eb9
.exe windows x86

4528f77b19993b636676e403f4252110

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5194
ord6407
ord1997
ord798
ord533
ord825

msvcrt

_acmdln
__getmainargs
_initterm
exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
__CxxFrameHandler
fopen
fclose
fscanf
remove
__setusermatherr
_itoa

kernel32

GetModuleHandleA
HeapFree
LoadLibraryA
FreeLibrary
GetCurrentThreadId
GetStartupInfoA
GetProcAddress

Exports

Exports

s_665754_134235_3563345_1231245_910384_0193848_login

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 961B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 244KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ