7b238b486cb7a3c8119d45bada2272d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b238b486cb7a3c8119d45bada2272d2
Size

75KB
MD5

7b238b486cb7a3c8119d45bada2272d2
SHA1

bf27c69247e969c55b6692122ad87151f5107315
SHA256

40db03b3862e9e453ca31b83b88bdc694d026a1fcda505b973af65b425e953e9
SHA512

4b16179b56ea467ca03b7fe6b4fbcd53f24f183d187c3cb75a1cfc8a5dbda71078b9977243918ab7f263bad3f12f9b519f04b6d901c75b89e9eabe2600f35c11
SSDEEP

1536:oV6NobIarY+KLtyVMQ466uiV9DGnKCwUBJXRW4OJNWbcIwjBE9M3XZazlSlxUoGX:pf8AVhv3XZGlqx/GLrtX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b238b486cb7a3c8119d45bada2272d2

Files

7b238b486cb7a3c8119d45bada2272d2
.exe windows:4 windows x86 arch:x86

c4da0d3f4cf2c3d10c2ebc870e1f6879

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetEnvironmentVariableA
VirtualAlloc
WaitForSingleObject
ResumeThread
DeleteAtom
SetEndOfFile
EnterCriticalSection
CreateFileA
GetCurrentDirectoryA
GetExitCodeThread
GetVersion
CloseHandle
GetFileSize
HeapSize
GetModuleHandleA
GetCommandLineA
IsBadReadPtr
SetLastError
SetFileAttributesA
GetFileAttributesA
GetStdHandle
DeleteFileA
SetLastError
FindAtomW

shell32

DragFinish
ShellAboutA
DragQueryFileA
StrChrA
SHGetMalloc
SHGetSettings
SHFree
DragAcceptFiles
ExtractIconA
DuplicateIcon
ShellMessageBoxA
SHFree
DllUnregisterServer

umdmxfrm

GetXformInfo
GetXformInfo
GetXformInfo
GetXformInfo

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ