7d0449f03e1b16c17d82c67e9c19b2c5 | Triage

Sharing

General

Target

7d0449f03e1b16c17d82c67e9c19b2c5
Size

82KB
MD5

7d0449f03e1b16c17d82c67e9c19b2c5
SHA1

397ebc420c1e773e509da2b1f0bcb7903fcb1e46
SHA256

5708076c5b60b57c08d11946c480d866e64f067d793e698487a34bcb1188079b
SHA512

d88c64db5a00f36c00d8d17938138737426db0729ef415a026e22b6b1dd2dd2e5105503fb10e2d7f1c45018b65ab24c19876dfa4a63de2020c0101d6f42666cd
SSDEEP

1536:1m9ij54n7/9neT9pdjezZSHJz1CetKK5XVnbzEuHxGcfs8F:17qnheT9pdjkZId1//5XRb410s8F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d0449f03e1b16c17d82c67e9c19b2c5

Files

7d0449f03e1b16c17d82c67e9c19b2c5
.exe windows:4 windows x86 arch:x86

e8f96f3ec3aa8c64edeaaad7010cbf3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
LocalFree
GetLastError
CreateEventA
lstrlenA
FreeConsole
OpenMutexA
IsBadReadPtr
FindClose
GetModuleHandleA
ResumeThread
VirtualProtectEx
GetStdHandle
OpenMutexA
GetSystemTime
LoadLibraryExW
CloseHandle
FreeEnvironmentStringsA
GlobalLock
GetACP

user32

IsMenu
CreateWindowExA
DialogBoxParamA
ClipCursor
GetMessageA
SetFocus
IsIconic
GetComboBoxInfo
GetDlgItemTextA
GetSubMenu
LoadCursorA
GetMessageA
EndDialog
MessageBoxA

msasn1

ASN1BEREncOpenType
ASN1BERDecCheck
ASN1DecAlloc
ASN1BERDecBool
ASN1BEREncNull

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE