7d99e548b2a997c96c9e5bb90b033473 | Triage

Sharing

General

Target

7d99e548b2a997c96c9e5bb90b033473
Size

45KB
MD5

7d99e548b2a997c96c9e5bb90b033473
SHA1

34d89260ee71d4b02402a683e3ca027360962e4d
SHA256

73e5553e542293e24a29efbd308d7da29cff698180e1ed605497953d90ae2ab1
SHA512

e17f3973e05d33f287c6b3f6e7479df10daac6571c731520cef05766864144c69c199737b5d3d7536f565dc8f841a8b2aa3809af3c59d57dc3eaf2d4479ec3a6
SSDEEP

768:JRVPWBTPrXyJUmhsDLhexxsIsSjfRE2SsYi/XQE5Y8no7u3QEngUXkbzAkvqF:7VPWBLriJzs5eLsSLREX7i55Y2o7EgUF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d99e548b2a997c96c9e5bb90b033473

Files

7d99e548b2a997c96c9e5bb90b033473
.exe windows:4 windows x86 arch:x86

925d520f5293e67288768f2e5b5319f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree

msvcrt

ceil

ws2_32

connect

user32

wsprintfA

advapi32

RegCloseKey

shell32

ShellExecuteA

oleaut32

GetErrorInfo

Sections

.wde
Size: - Virtual size: 124KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wde
Size: 44KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE