7acbaa7e59d38307780ff0b0d0cade88 | Triage

Sharing

General

Target

7acbaa7e59d38307780ff0b0d0cade88
Size

83KB
MD5

7acbaa7e59d38307780ff0b0d0cade88
SHA1

107d23f2a0b44663c101d27754141e75d47e2a50
SHA256

29b1f94f4310593890ae5dfbf5abefebc80bfe4072a61a10b18d26020dd864b1
SHA512

d673c1ece06bdddcd9a20771a29b0709c0a5cce360057cf03de3dd25c75d1afc643063f7b891b3149081b0032c16db50303b5b1b30ced7506ba33a1b4cd5edcb
SSDEEP

1536:dViDALW8j0KuYJJPhpEPVD7vrhsEsepjVrs2ryrd1vUQuqwcizSkX:dVJLW8jxucJPEPVlXtHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7acbaa7e59d38307780ff0b0d0cade88

Files

7acbaa7e59d38307780ff0b0d0cade88
.exe windows:4 windows x86 arch:x86

8a792a35ecea142fa810939231d14a23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexW
InterlockedFlushSList
GetConsoleInputExeNameW
GetConsoleTitleW
GlobalFindAtomA
VirtualQueryEx
GetProcessAffinityMask
lstrcmpW
InterlockedDecrement
GetProcessTimes
FindActCtxSectionGuid

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE