07a116cb7a7cf65dd661118d087bde43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07a116cb7a7cf65dd661118d087bde43
Size

224KB
MD5

07a116cb7a7cf65dd661118d087bde43
SHA1

a88b172805f1f73570fc3c0612a95c57ac78860a
SHA256

691034405536ce6c83c00480ede96ee5e0d75e23d4ac9314a4583786c4eac737
SHA512

7112eb50124d09ce2078f7e23a3b03d38b8c17b02f673bc4c0dbfc238e818b0db58273d0a13909273b1de1bd04451a99952e07623a2b18b0d720e0bccfb87898
SSDEEP

6144:nlciTxoGhAnpzVCv3jIMk3HxH7hN3jIMRAnpzVCv3jIM:nGimw0zY3k3HR7X3R0zY3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07a116cb7a7cf65dd661118d087bde43

Files

07a116cb7a7cf65dd661118d087bde43
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ