7b0dc5e934405fd70f461030699ecf64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b0dc5e934405fd70f461030699ecf64
Size

24KB
MD5

7b0dc5e934405fd70f461030699ecf64
SHA1

a299faa8e1026f628f683dad8ee58cbc9bd3366d
SHA256

cb7b0fa1bf6ba626a45b46553c8da494808762b6e4a840f1f7f16cb55f60370c
SHA512

935016680df47883782b9641fc6381211caf5cf6f46d7059e02f54af50bfde31f4b9e286521a6201065f9a8cfa52ff4faad4b776c7d6a14381f79ca6db08aebf
SSDEEP

384:IAbuQtuB7HLvzCEvtddGtoUnY1AifP6YeOXgccrnYduC4CxMISM6mo6m:JCYY7jzH1HGto4iX3ehcc6H4zmo5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b0dc5e934405fd70f461030699ecf64

Files

7b0dc5e934405fd70f461030699ecf64
.exe windows:1 windows x86 arch:x86

0aa360bda39c7a1b17b99e85733b61ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
lstrcmpW
Sleep
lstrcmpW

user32

UpdateWindow

Sections

.text
Size: 19KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

cvhy
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ