7336d7a4d656cbdabc09f6f219a5f70b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7336d7a4d656cbdabc09f6f219a5f70b
Size

516KB
MD5

7336d7a4d656cbdabc09f6f219a5f70b
SHA1

d83e7bbb9cc28b90491b19da301dd88b30ac4478
SHA256

0d3adbf0e1bbc2f15701aba200142496b181ac93885256ae5e795f8deb9b583f
SHA512

42eb98ec39028b0ee6958a95583cc9e4cb97608b0ba80344e77b1fda4ec6a3fb80d7731f666455ad40432ccae61d52a08eefde2c38e6f7d5d3252ef58cdff4ef
SSDEEP

12288:sUyZS51yeUcmjnULdRLQIxLcT9C9N3jcAGbbUvv2xE:sUyknm5LmPQIxIMdG/o6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7336d7a4d656cbdabc09f6f219a5f70b

Files

7336d7a4d656cbdabc09f6f219a5f70b
.exe windows:4 windows x86 arch:x86

a41cfb9fb794e01a6f8c2dea60ea2656

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA

kernel32

GetStringTypeW
GetProcAddress
GetModuleHandleA
CloseHandle
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
HeapFree
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 497KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ