07f6b516dadb32a9edabd4b692357210 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07f6b516dadb32a9edabd4b692357210
Size

146KB
MD5

07f6b516dadb32a9edabd4b692357210
SHA1

ca5bc21f3e9937f155a02565064624cd3da03797
SHA256

84271ac3ae91914ee798595ae92f98b8665032f8b26a55493d21225d3eda7d16
SHA512

41f6971024a2578c8d45c8cec0253b4bdc94ab875322e3f4958fbc62dc0a290e5adc4b18903eeff9dfbc8a61ba34bc8bd04b202b81c03bc8415c43c913988f3a
SSDEEP

3072:AatEi+TnSWklQey+p4jwYPMdfLNdVmT3zZkxbXVEZbHVC7WJQ2ts6DXudsl:AaGnulO4gtPLzZkxD8HVC7WF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07f6b516dadb32a9edabd4b692357210

Files

07f6b516dadb32a9edabd4b692357210
.dll windows:4 windows x86 arch:x86

24a0b87af31b2b8d4a769034e6805eff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CompareStringA
CreateFileA
ExitProcess
FindResourceA
GetACP
GetCommandLineA
GetLocaleInfoA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
HeapCreate
HeapReAlloc
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
MultiByteToWideChar
ReadProcessMemory
ResetEvent
RtlUnwind
SetLastError
SetUnhandledExceptionFilter

msvcrt

__p__commode
__set_app_type
_except_handler3
exit
srand
wcscat
__getmainargs

user32

IsIconic
ShowWindow
SystemParametersInfoA
TrackPopupMenuEx

winmm

mmioAdvance
mmioDescend
mmioRenameA
mmioSetBuffer
mmioSetInfo
timeGetTime
mixerGetID

Exports

Exports

XFromIchMEUED

Sections

.text
Size: 94KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ