f7d0f15b9563ea0b7939477dd3b7afd6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7d0f15b9563ea0b7939477dd3b7afd6
Size

169KB
MD5

f7d0f15b9563ea0b7939477dd3b7afd6
SHA1

9c61d2807b06845d92d883643672c48eeb51c718
SHA256

54683e83d86955480f0854c2e4b6043d78e6ca821e50c1ba2592c393f1887140
SHA512

472d017b530d8067dfff95d4673276fdc6ab240e6e8bb3332a55e21d51f6ec0df65bcad518ecf549dafab7ba1483856a84a87fcb0d7f6d2be63183e8293e5a57
SSDEEP

384:9IyMDj+oLuht3FMSTTuCOkamoWtU43ggPzOfA9nc7ybzVzsnjO6bLu6AKeKrOPvp:9uyoL6aPCOkzSgPioHK1AKEf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7d0f15b9563ea0b7939477dd3b7afd6

Files

f7d0f15b9563ea0b7939477dd3b7afd6
.exe windows:6 windows x86 arch:x86

1f83362a57e6d6a2f15132c167d7f42c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
FileTimeToSystemTime
VirtualAlloc
VirtualProtect
GetFileInformationByHandle

mpr

WNetUseConnectionA
WNetCancelConnection2W
WNetGetLastErrorA
WNetAddConnection3W
WNetGetUniversalNameA

winspool.drv

EnumMonitorsW
ord215
GetPrintProcessorDirectoryA
FindNextPrinterChangeNotification
EnumPortsA
GetJobW
AddPortA

gdi32

ExtEscape
Escape
SetMapperFlags

msi

ord116
ord41
ord22

user32

MessageBoxW

Sections

.text
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ