07854641a92c11570ed5eb2c87a4c505 | Triage

Sharing

General

Target

07854641a92c11570ed5eb2c87a4c505
Size

17KB
MD5

07854641a92c11570ed5eb2c87a4c505
SHA1

0832be695e32d2ca857982d0d00d5978ee76d32e
SHA256

6dc1836e0ae9457d19764a276e51943246ab8d21dda568330db57f04a708a62e
SHA512

47f9250d46e3dd1f583b39506387544031933b5f99e20c3a19cdc7684709839340978833baab87bcbca53eed64fef5b68c6d6323aaa95cb75a4d9bd63eeb2853
SSDEEP

192:CvYT9NpWFdgHPf6FgmwAS0TK9tFDvoR/A2Z9+D1zA9cclMcfrPGQX90qev4EQnBd:X9bWbgswq4jzOL8ZhclHreC9egEHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07854641a92c11570ed5eb2c87a4c505

Files

07854641a92c11570ed5eb2c87a4c505
.exe windows:5 windows x86 arch:x86

86db667a5f2f09bea842de3e9da53919

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
GetWindowsDirectoryW
lstrcatW
CreateFileW
VirtualAlloc
GetProcessHeap
TerminateProcess
IsDebuggerPresent

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

GetOpenFileNameW
FindTextW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
ChooseFontW

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ