7611dd532599b66b47e3fec89489b397 | Triage

Sharing

General

Target

7611dd532599b66b47e3fec89489b397
Size

334KB
MD5

7611dd532599b66b47e3fec89489b397
SHA1

ffa7361dd9a55a2d2babdbd667a2c252355b0dbd
SHA256

5a0725d814879a58ed0f28ea52f23663cd3f510228ac711750ef4fd3ce05d004
SHA512

6d47d0a6a80ca39ab3e670539d0ac815eb9b85474bed28f8aa79bd7c1c30178423a48dabb9ef736205e953250a46e867ffdc2d3157c1276a667cee17b41355c3
SSDEEP

6144:d5AXOZNyD7dzY6VnCRK0Nt1Koif1D+yfHXw2rh4Uy3Gw5j5sxu/0S3abHGuIGahj:SPVCI0rIoUpP/5rKFrV3aHGu1a/ES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7611dd532599b66b47e3fec89489b397

Files

7611dd532599b66b47e3fec89489b397
.exe windows:4 windows x86 arch:x86

70e4bc4d845d55bcd0633f7d11af0b3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
ResetEvent
CreateFileA
SetEvent
ReleaseMutex
GetSystemTime
CloseHandle
FindAtomW
LocalFree
GetTickCount
GetDiskFreeSpaceW
GetFileAttributesW
lstrcmpW
GetModuleHandleA
CreateThread
GetCommandLineW
LoadLibraryW
HeapCreate
GetComputerNameA
SetLastError

user32

GetClipCursor
FillRect
DestroyCaret
DispatchMessageA
CreateWindowExA
GetClassInfoA
CloseWindow
SetFocus
GetComboBoxInfo
CallWindowProcA
GetDlgItem
GetKeyState
DrawStateA
MessageBoxA

cryptdlg

DecodeRecipientID
CertTrustCertPolicy
CertConfigureTrustA
CertTrustFinalPolicy
CertTrustInit

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 322KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ