7[.]exe | Triage

Resubmissions

17-01-2024 08:56

240117-kvzqsacagk 10

07-09-2023 18:34

230907-w7rrgsch8y 10

Sharing

General

Target

7.exe
Size

595KB
MD5

cf19e55c9604d5c002ac7b9770c529de
SHA1

34a3c780ba2decb6c676723fbcb916c007bacb8c
SHA256

fe3c93db5bfab8423d142e07b5adc73620d8a492f2ac67f4ade1e40bf3abd7cc
SHA512

579f9a3124f85cf923fc506f3a1f69a848d0107a5cf5a8e2cc111d162d1a6937450ae94e396003531bbdcc18a1c5061322d12f96ec55888fdaf22af894480f3f
SSDEEP

12288:n1y3etoY2JI8p+7OVA9VwXwNQYuB5cZc1:FtNUhc7w2a+uf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7.exe

Files

7.exe
.exe windows x64

7e5590227ad3aecb2feedda5da4da1cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateFileA
CloseHandle
GetLastError
CreateActCtxA
ActivateActCtx
DeactivateActCtx
GetFileAttributesA
LockFile
UnlockFile
SetFilePointer
OpenFileMappingA
CreateNamedPipeA
WaitNamedPipeA
ExitProcess
VirtualAlloc
GetDiskFreeSpaceA
GetDriveTypeA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ