7b06d7b2ec7c8fad48d89e7f374dea0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b06d7b2ec7c8fad48d89e7f374dea0d
Size

246KB
MD5

7b06d7b2ec7c8fad48d89e7f374dea0d
SHA1

a1c163ee4bbdce0db2ed7beb2713a481710683e5
SHA256

22a99d483fec6b12317af540d80a3184f0ef9384104204be7e863c2dc01f6eea
SHA512

58206731cdfabd32060d6eb3b2f35e750ac8b7479ac548afc5b7abe93a7939e79a05958568f26ebc073305ff8b849736c6f86dd5cdfe09aa5ebdca3b3fce3117
SSDEEP

6144:HxA/BD/qHWdl5EFVVFvZfngIjjCnEMtIIdMO:HxA/Vj5EFVVrgCjkEGt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b06d7b2ec7c8fad48d89e7f374dea0d

Files

7b06d7b2ec7c8fad48d89e7f374dea0d
.exe windows:5 windows x86 arch:x86

f8e68a93759546dec5e2df232f5752f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
GetModuleHandleA
lstrlenA
lstrcpyA
GetCommandLineA
GetStdHandle
ExitProcess
GetStartupInfoA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 422B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ