07d7dd726002c349ff9dc4210ef71b27 | Triage

Sharing

General

Target

07d7dd726002c349ff9dc4210ef71b27
Size

37KB
MD5

07d7dd726002c349ff9dc4210ef71b27
SHA1

e828fd5b22a5a1429e43a2e5a042af9c01405c55
SHA256

6431374cc68fafd759a1eb3ad7a63f92a8892fcb00ed0177a43e152e70f706f1
SHA512

804f63c840842e3e2f7897901989c50db4a8033f6ccacbb5fb76cf5b6570a3bb372db0612f2abd90192ab2c3c8ab86b1fcad84e879e07a4c98d0e454d4e199ba
SSDEEP

384:Az6i8DaBQFmlH+lyyd4Bsrh6oZiHxC1OoNTyRFAlvCAWiI4hu0jmPG:46i86gyH4h6ogR4OCqAlvxFubPG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07d7dd726002c349ff9dc4210ef71b27

Files

07d7dd726002c349ff9dc4210ef71b27
.exe windows:4 windows x86 arch:x86

7b9e90e47a17a1d94a416169d1ec8d1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyA
RegQueryValueExA

dfvcddrv

GetVirtualCDROMs
InsertImage
DLL_Init

kernel32

GetStartupInfoA
GetCommandLineA
GetVersion
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WYCao
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ