7b51c3eff58d1334abff36b517afb9dcb3b059b4b0a94e98847d3694044b4797 | Triage

Sharing

General

Target

7b51c3eff58d1334abff36b517afb9dcb3b059b4b0a94e98847d3694044b4797
Size

1.6MB
MD5

d1637343cea692b7d4330aba21003d71
SHA1

6ed4171da1c55347dc8085d867bb981ddcda9551
SHA256

7b51c3eff58d1334abff36b517afb9dcb3b059b4b0a94e98847d3694044b4797
SHA512

c1d6af244262164c1e383bb693185bbc70b8f2285721c38861da15e7e394d6f5501579b737414162c9e1c3aef2dd38cb1133cc541d6cab00635a24272236ec5e
SSDEEP

24576:CCyq2V11gfHrI6hUpJ45HNq+++Z1EJ0pbXfj15WrKid5nQaCPSzEjerLTZGujcX:WZ16B5HNNr0UXdirAP6nTZ5c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b51c3eff58d1334abff36b517afb9dcb3b059b4b0a94e98847d3694044b4797

Files

7b51c3eff58d1334abff36b517afb9dcb3b059b4b0a94e98847d3694044b4797
.exe windows:4 windows x86 arch:x86

4527962e4ec432b77edd2c1e4d4ddd9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

AdjustTokenPrivileges

comctl32

ImageList_AddMasked

ftctrlpro3

?OnBeforeFloat@CBCGPDockingControlBar@@UAEHAAVCRect@@W4BCGP_DOCK_METHOD@@@Z

gdi32

GetBitmapBits

mfc42

ord4882

msvcp60

?freeze@strstreambuf@std@@QAEX_N@Z

msvcrt

_wcsicmp

msvfw32

DrawDibOpen

oleaut32

SysAllocStringLen

olepro32

ord251

psapi

EnumProcessModules

shell32

SHGetMalloc

user32

CreateIconIndirect

winmm

mciGetErrorStringA

wsock32

WSASetLastError

ftzipro

?ExtractFile@CZipArchive@@QAE_NGPBD_N0P6A_NHHPAX@Z2K@Z

ole32

CoInitialize

Sections

.text
Size: 1.6MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE