07fd6010fbb06bd3ce5e498aa575c231a381a28207fe08e077af1a623e3337af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07fd6010fbb06bd3ce5e498aa575c231a381a28207fe08e077af1a623e3337af
Size

33KB
MD5

e294e96af92f59d9665984bfa2baec52
SHA1

19589d7df786ce69db8ace758121bb742ca06f36
SHA256

07fd6010fbb06bd3ce5e498aa575c231a381a28207fe08e077af1a623e3337af
SHA512

89742c9f553eb5f87d68803838a979a4d841aa6f892090597b6bdcebdd9bf57dfbb744d8914cb509d9515645fb47d86084a8a13ed3e62291679b5c18adf74da5
SSDEEP

768:gARna2dwHFv5SiDM+teXlxjp4GIa8x0zZAoD0:fRolxSimp4GaxAvQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07fd6010fbb06bd3ce5e498aa575c231a381a28207fe08e077af1a623e3337af

Files

07fd6010fbb06bd3ce5e498aa575c231a381a28207fe08e077af1a623e3337af
.exe windows:4 windows x86

b17fdefcf65a56187e003ddc76bf71ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetTickCount
lstrlenW
WideCharToMultiByte
GetDateFormatA
GetTimeFormatA
GetLocalTime
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
LocalFree
GetCommandLineW
GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
GetPrivateProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA

user32

PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetWindowTextW
GetWindowTextLengthW
GetClassNameA
GetWindowThreadProcessId
IsWindowVisible
FindWindowExA
MessageBoxTimeoutA
GetParent

oleaut32

VariantTimeToSystemTime

msvcrt

modf
__CxxFrameHandler
free
??3@YAXPAX@Z
malloc
memmove
strchr
??2@YAPAXI@Z
strncmp
strncpy
_ftol
atoi
sprintf

shell32

CommandLineToArgvW

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE