07b70cf49bbb40ff6c3cf2fad519201b | Triage

Sharing

General

Target

07b70cf49bbb40ff6c3cf2fad519201b
Size

182KB
MD5

07b70cf49bbb40ff6c3cf2fad519201b
SHA1

1fbca96366bce522a0c33f96bb8e893de68563a9
SHA256

6cb7813e62720804664a5171bed3db30589274b872643d970320250761b679fc
SHA512

51288039323783b8f7dc424bdb7dae20c99305d7ba3d1bff765832d4278c4f750c5edcf07a679741aeb377a3f9feffa55a56a2c421f527843bcf0aa8fe7233c0
SSDEEP

3072:UC+Rk/PZHf8Rh2s8zMJ1fsis0Gb3Dy0iylTXbSoqkAO:3Hfubd7EinGT3xrw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07b70cf49bbb40ff6c3cf2fad519201b

Files

07b70cf49bbb40ff6c3cf2fad519201b
.exe windows:5 windows x86 arch:x86

24ef4685d60bf7107c3bd9590c657ba1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
VirtualProtect

msvcrt

exit
_except_handler3
_acmdln
log
_XcptFilter
__getmainargs
__p__fmode
__set_app_type
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

user32

FindWindowA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ