7a90215363b6c011c4e7e48246bc6d4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a90215363b6c011c4e7e48246bc6d4a
Size

89KB
MD5

7a90215363b6c011c4e7e48246bc6d4a
SHA1

7595aba72c6126bf156ec86ffcb471a984749a93
SHA256

9fe7cb1350011fb2f0422e54a5fd3a3f47cbf762f5d7cb2ca04de323d6fc93d1
SHA512

c5e3d6bad3e796deefac96f13f3d9c201179d5b2d4c97943c8997351508f6f3a08f747507aacb2fc131723b57f6a4af21de1499e9a21831ffd82ff9f1e74fdf0
SSDEEP

1536:e0QabCqvp/9yZ1920C2xOtC85w1aeF4g6cRy63EJwrNemS0NP:eZaXplc9dFxr8LU4g6a33+wrrS0F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a90215363b6c011c4e7e48246bc6d4a

Files

7a90215363b6c011c4e7e48246bc6d4a
.exe windows:4 windows x86 arch:x86

57274b6625b4a17fae0d4cb5f2b336f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetPriorityClass
GetPriorityClass
ExitProcess
GetFileSize
AddAtomA

shell32

DllUnregisterServer
DllRegisterServer

Exports

Exports

Knfxkkt
Cjkmbfqdx

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

tberlxpg
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ