7a81c9521cf4a3992f4e2f893e2442fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a81c9521cf4a3992f4e2f893e2442fc
Size

16KB
MD5

7a81c9521cf4a3992f4e2f893e2442fc
SHA1

aa9f474ff6216dd3e55dce708534d488603a1d3f
SHA256

e24ad626a50e11d9ebd82526a3769b366e8089a8f210c7e30d66caa5eb3861d0
SHA512

b68d9c4296997ff7623f0b22001d2fab0faffc361ee96e4a5500e31661a639d7d7a0822bfcb4f54a9bc98f8d0c5d5e7e28cca401fbb9ae146b0e3e4a3c45d6d0
SSDEEP

384:z7tAT/FU71dkGR5fOkclYi+Asi69PUVaN:z7t8/FU5dkeWkcx+AsiWy8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a81c9521cf4a3992f4e2f893e2442fc

Files

7a81c9521cf4a3992f4e2f893e2442fc
.exe windows:4 windows x86 arch:x86

e608ef69f26089d43c0712b8a5564ef0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualAllocEx
LockFile
UnlockFile
IsProcessorFeaturePresent
WriteFileGather
WriteConsoleOutputCharacterA

user32

RegisterSystemThread
ShowCaret

tapi32

phoneSetStatusMessages

dsound

DirectSoundCaptureCreate8

Exports

Exports

OpenHupynltgjh
BeginMjkvvmpon
WriteWoipxdd
AddYumtlpwkg
GetKqsdcvy
Bfpcpchp
ReadIxexlujodt
InitAqewkddt
EndHtlqfaf
Hrorjlg
CloseBtqsqhotexe
Bogolnlj
Cikextesvni
ReadDxjeuefuy
InitCqfnfoyuys
Enlmktcauh
Ocjxoet

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ