7080848eb18b506453af14500bf6d9f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7080848eb18b506453af14500bf6d9f5
Size

66KB
MD5

7080848eb18b506453af14500bf6d9f5
SHA1

cb6ec42f146646d82c73c15659e29ccd06c85217
SHA256

6bf38f8ab9faa308d903061604435d74bb461d17a615c00c5fdd34db0a5e4884
SHA512

9d34055957e0a7a6f0bb9a6ed76e3ebbd01664ba94603aed2e752a788d006913e024581f9097913c3f7d3bde3a268469ad8c987f9aeb13bf827fd898f6b1cc9a
SSDEEP

1536:nTmqjfhW48VgcKsAnuW6geKuwPms3kgZcuMccBuTk3:KufcZKcKsAnuWxqwms310cdTc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7080848eb18b506453af14500bf6d9f5

Files

7080848eb18b506453af14500bf6d9f5
.exe windows:4 windows x86 arch:x86

6d3b7fc2cc8fd101f63a0ce03b9aaf68

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
CreateMutexA
SetLastError
CloseHandle
TlsAlloc
GetModuleHandleA
FindResourceA
GetStdHandle
DeleteAtom
GetProcessHeap
TlsGetValue
CreateFileA
GetCurrentThreadId
GlobalUnlock
LoadLibraryExA
lstrlenW
GetEnvironmentVariableA
ReleaseMutex
GlobalFree
GetExitCodeProcess

user32

GetDC
CheckRadioButton
DrawMenuBar
FillRect
IsWindow
CreateMenu
SetFocus
DispatchMessageA
DrawEdge
CallWindowProcA
GetDlgItem
CreateWindowExA
GetCaretPos

rsaenh

CPDecrypt
CPDeriveKey
CPHashData
CPSignHash
CPGenKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ixdpnac
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE