07bf59d30cb94ce6c91971c72afb8af9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07bf59d30cb94ce6c91971c72afb8af9
Size

188KB
MD5

07bf59d30cb94ce6c91971c72afb8af9
SHA1

2edfae304883ef8f8d140b02dd6a34aee00787f1
SHA256

cb6db30248004b1fbf297315014fcf1f7b739041fe6e99be96e2490c87666c51
SHA512

7aa08ffa0e2750dcc4f98cb2768983d942cffb8100287934cb975e95b54775cafdfb735b4f66403b95018ac523aaa656bf2bd85b973820ad284b6cd69b6f6323
SSDEEP

3072:Pmm0VgzW8FW703sEptchtjz9FkUpK3zlboswccH4fB2eFyOjtuLJZ6oV/+MY5HeH:PmVgzW0kippa/jz9HpK3zIQ2eFyO5uLd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07bf59d30cb94ce6c91971c72afb8af9

Files

07bf59d30cb94ce6c91971c72afb8af9
.exe windows:4 windows x86 arch:x86

d9147a7ec6974060beebcb95ee285f5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
LoadLibraryA
CloseHandle
ExitProcess

user32

CharLowerBuffA
CreateWindowExA
wsprintfA
CloseWindow
SetWindowLongA

advapi32

RegQueryValueA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegSetValueA
RegCloseKey
RegOpenKeyA
RegCreateKeyA

Sections

.text
Size: 168KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ