7668e6f335b0da5c4895c8c20630545c | Triage

Sharing

General

Target

7668e6f335b0da5c4895c8c20630545c
Size

401KB
MD5

7668e6f335b0da5c4895c8c20630545c
SHA1

2b6da95589a5624d3081c411ed3b37f317aa4186
SHA256

24b4ff84491c97cef3f3a26261987dd55c0119e7cbbbb0531fcba84105af1dea
SHA512

15da4f3dc9b4ce3f4ba290c06d96d4f516a9df79bd70feac7dee28cc7d52c99115a992119990be669d6434a7e16145f3eca4ab03d9bf8f2a5ec10cc371217512
SSDEEP

6144:s8jzM7eQxGyUiFLJ5G5jzi8d/wdxqi1STZoQzt+mt1V9YDMnJBnuyI:sYpRyBzKHi8d4d8i1eyQzImt1VfvuyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7668e6f335b0da5c4895c8c20630545c

Files

7668e6f335b0da5c4895c8c20630545c
.exe windows:6 windows x86 arch:x86

6a06d1fa38af061b6a93049c91c70ea8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessW
ExitProcess

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
GetDeviceCaps
GetObjectW
SelectObject

user32

GetDC
ReleaseDC

Sections

.text
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ