7b0f7a654d14e1126eb74716c7d60489 | Triage

Sharing

General

Target

7b0f7a654d14e1126eb74716c7d60489
Size

114KB
MD5

7b0f7a654d14e1126eb74716c7d60489
SHA1

3f66f0e62c9ccf43fd77e80d864efe91ff10b077
SHA256

530517720f37a2d72898f2e579126569e268a3f0a66311d7d1d84a47dd03ae63
SHA512

b0627a2ac06d1b4e98d3d9ec517889d9719a2b70596f2884ab90145e53961b257b337c07888780abde723e90e9205c6ad78b681f6c67135d084ac1711ddede16
SSDEEP

3072:pXNdwqcpO2AxYtQZBEMBezSiVVd0nH7uordcIppo3:pddopf2YiZBLyBzKnBn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b0f7a654d14e1126eb74716c7d60489

Files

7b0f7a654d14e1126eb74716c7d60489
.exe windows:5 windows x86 arch:x86

ad09ea966deb627075d2b3feacabade2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetVersionExA
CreateMutexA
GetStdHandle
CreateSemaphoreA
GetModuleHandleW
GetProcAddress
GetModuleHandleA
GetStartupInfoW

user32

LoadCursorA
LoadIconA
LoadCursorFromFileA
GetWindowDC
SetWindowTextA
ReleaseDC

msi

ord212

msvcrt

__wgetmainargs
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_exit
_XcptFilter
exit
_wcmdln
_adjust_fdiv
_initterm
__setusermatherr
_onexit

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ