07d2761960cb96f21d776e9a76fc13bf | Triage

Sharing

General

Target

07d2761960cb96f21d776e9a76fc13bf
Size

388KB
MD5

07d2761960cb96f21d776e9a76fc13bf
SHA1

d2d47a10d6059d9e4536774e70fe18188afe59ef
SHA256

f1020728aa0926faabb13379a82c4076419aa301f55c4cb306491713fad745c3
SHA512

01425b3c2c5e4a9b4041c5b6e2a1db886051a86c2b00b6c9975fad779207314637bf1f67d5d856f569548c703fdb033f7fb80d276e6ad01b2380bc8787f09011
SSDEEP

6144:fcI/tIRDOEPF8BJWiFq/u55kwBj1r7JP2EBvQRGWxYRqvPZEEFGoRINvWVKE:ptkCEpiFqdwBZl0fZE24uVKE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07d2761960cb96f21d776e9a76fc13bf

Files

07d2761960cb96f21d776e9a76fc13bf
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ