7cfb50db0bfc241f094304fea36ec805 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7cfb50db0bfc241f094304fea36ec805
Size

22KB
MD5

7cfb50db0bfc241f094304fea36ec805
SHA1

f038ec59b82666d9356afb7b0bb21e03815b38fa
SHA256

eca580f6a4029c40a48ae4b284d57829cb71f5dfd90a58aa4a0a43a605bb2416
SHA512

0eba8ff0d9698c8717ce38ae4dbd2e78898845582aad3801ae3fccb4f19afd7cb01fed1a64573c26279b176129cae125131ea85e745a681ba24e036311d92f1a
SSDEEP

384:Jpb53f1KDenWc7DOWZsx/fD74e8CQ8Xz6:tPFDO4S3g78D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cfb50db0bfc241f094304fea36ec805

Files

7cfb50db0bfc241f094304fea36ec805
.exe windows:5 windows x86 arch:x86

126431585006ed949595ff39421387ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
LoadLibraryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
FreeLibrary
GetSystemTimeAsFileTime
lstrcpyA
GetStartupInfoA

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__getmainargs
_cexit
_XcptFilter
_exit
_c_exit
_controlfp
exit
_acmdln

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

user32

wsprintfA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE