cf7ebc2979af5424c0765a9668eeb6a0_exe32[.]exe | Triage

Sharing

General

Target

cf7ebc2979af5424c0765a9668eeb6a0_exe32.exe
Size

297KB
MD5

cf7ebc2979af5424c0765a9668eeb6a0
SHA1

f5947225b0839c276e6949230b6cc6850b23fe06
SHA256

4b1581d2fd9fa8a033c407723a315627c06782ee028c82f5f4bca775f7f2c5a1
SHA512

8245fc14d0a4ab26193a26bfc0b6b442e1d011fda5516c33638037696f2f550dc7813e0b4d051d25d91b82c6e12487a4dcde94dada4b2d9017e2152037c2a4be
SSDEEP

6144:0RIOnicZ7tD7vy7rSxqewCcE3bRK3PTgvaOwXWlBtg/nE:0RImLSSYtxPUhR9g/nE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf7ebc2979af5424c0765a9668eeb6a0_exe32.exe

Files

cf7ebc2979af5424c0765a9668eeb6a0_exe32.exe
.exe windows:1 windows x86

eb85f9841caba6951fdea133fd00eec3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
lstrlenA
GetModuleHandleW
CloseHandle
GetCurrentProcess
GetStartupInfoW
GetLastError
lstrlenW
GetVersionExW
LoadLibraryW

crtdll

__GetMainArgs
exit
raise
signal

user32

SetForegroundWindow
LoadStringW
SendMessageW
MessageBoxW
DefWindowProcW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 988B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ