7caa9de9c0bff975dbdecef580da6310_exe32[.]exe | Triage

Sharing

General

Target

7caa9de9c0bff975dbdecef580da6310_exe32.exe
Size

39KB
MD5

7caa9de9c0bff975dbdecef580da6310
SHA1

dc93e39a0a56bfaad9e71de57c004e23acc1aff1
SHA256

9ab3b0f8b1c5928ed049a9b867e44ac89a532ff419267d30685b7f6ac0a7f1d9
SHA512

2b61c5148110e73a97f6b9ac25ae75f3d93eecd7694e9ca395bc816ebaff07def4d080a001fcaf833f78d839a831aabba22853ec53ef4953ad0ac01d15f48f18
SSDEEP

768:/zSJcDSWD6z3afvJc0cFOF+Mj0prJyokyWURPF8NQvUB8PAlN/mLc:/zLDSWmz3QJhcFOF+Mj0prJyokyWURP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7caa9de9c0bff975dbdecef580da6310_exe32.exe

Files

7caa9de9c0bff975dbdecef580da6310_exe32.exe
.exe windows:4 windows x86

2dd6c80642b2098b8e4d0e817889d29d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringA
LoadCursorA
LoadIconA
RegisterClassExA
GetMessageA
ShowWindow
CreateWindowExA
DefWindowProcA
PostMessageA
SendMessageA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
PostQuitMessage
SetFocus
DestroyWindow
UpdateWindow

kernel32

lstrlenA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
WriteProcessMemory
CreateDirectoryA

gdi32

TextOutA

wtsapi32

WTSEnumerateProcessesA
WTSLogoffSession
WTSQuerySessionInformationA
WTSWaitSystemEvent

crtdll

_initterm
_exit
_local_unwind2
_global_unwind2
_fmode_dll
_commode_dll
__GetMainArgs
_XcptFilter
_acmdln_dll
exit
??2@YAPAXI@Z

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ