7afd6d905f75e093e2a0eb118cba154b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7afd6d905f75e093e2a0eb118cba154b
Size

240KB
MD5

7afd6d905f75e093e2a0eb118cba154b
SHA1

7b35237a3ce512f772629bc3f9e521f25b014602
SHA256

98dd32f521c178b16b61d1150c091fbd77bd831599a68b07aefc2571b8a78eff
SHA512

3c6212fe675c05a82ddbc8c296fa96cd0b2682d3a167a1a4e1617fe5e8048e43d847fcb41b3b3cd39c0dab43a1a1a166d051982c5b0f049d0e63bbd649e267a5
SSDEEP

6144:F7asP27k+OhoeZQiE4m+rtC0gC3d1mUmK/mCWW6sYx3K8pj:F7asPWyoeZQiE4m4mUZYsYRxp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7afd6d905f75e093e2a0eb118cba154b

Files

7afd6d905f75e093e2a0eb118cba154b
.exe windows:4 windows x86 arch:x86

14910afa29c17a14eebe29e5a2f1b295

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

FindWindowA
EnumDesktopWindows
LoadCursorA
LoadIconA
RegisterClassExA
TranslateMessage
DispatchMessageA

shlwapi

PathIsDirectoryW

kernel32

GetProcessHeap
EnterCriticalSection
GetFileSize
LeaveCriticalSection
ExitProcess
ResetEvent
SetEvent
WaitForSingleObject
GetModuleHandleA
GetCommandLineA

cfgmgr32

CMP_Init_Detection

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.strings
Size: 5KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ