07816cda581f7c719c6c2d1d11c7a6c8 | Triage

Sharing

General

Target

07816cda581f7c719c6c2d1d11c7a6c8
Size

58KB
MD5

07816cda581f7c719c6c2d1d11c7a6c8
SHA1

84c06c44b7b182f8eeb03931df9bed0e669794df
SHA256

40c3f31d4cbb9bea5fe1ddbd9d380b0d9e18060295fd36ab629a7b4a03431ce1
SHA512

c371c64d9f4187e99288cb64c338418c06a95066a53600ce96261e5c5bf59450c97a0b970968b3b6701db4e44ba117227eaf65966ed93c57d6f57d858d3085ca
SSDEEP

1536:YamzS3WWecr/3iW+dMe+K61SeU+1Ds6J3OOPA/Zwj:szwWXcrvinMeIOgFJefRw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07816cda581f7c719c6c2d1d11c7a6c8

Files

07816cda581f7c719c6c2d1d11c7a6c8
.exe windows:4 windows x86 arch:x86

4501f0f4bcc646a898d54d563cbe3707

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualProtectEx
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

PostMessageA
IsChild

Exports

Exports

Uyfygfxa
GetThxbeybdhcw

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA2
Size: 3KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enill
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ