7ba90ccefd2a4dc0b22e51520f8d0835 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ba90ccefd2a4dc0b22e51520f8d0835
Size

35KB
MD5

7ba90ccefd2a4dc0b22e51520f8d0835
SHA1

170ac460ba0f1b40d0a039c3e8d0998aefe0ea65
SHA256

cfea81f3f84247f86faf56254b6f8b10c4769b494b69e465bee9bafe0cfb5fe2
SHA512

9c7fd3ad3767aae475a4a159ef06f7652de95f950287fa695972df9a799aa5fbe795714fadee6a69b3d0b9eb33a6e4f90e7a2fa9cd2bc8e1e3350fc39c0a2160
SSDEEP

384:Tx2AbxyaGVQLPtj+WkiDI5OQxSbCtzpHYN42eo1EYZjXPBFM+rCRijm8y4fOXtOZ:TE+7kYQxSbC1pl2YYZjJtGsm8TE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ba90ccefd2a4dc0b22e51520f8d0835

Files

7ba90ccefd2a4dc0b22e51520f8d0835
.exe windows:4 windows x86 arch:x86

f4b2f6be5d54579265d89067f8e19298

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempPathW
InterlockedCompareExchange
InterlockedDecrement
IsDebuggerPresent
LoadLibraryA
QueryPerformanceCounter
SetErrorMode
SetFilePointer
VirtualAlloc
VirtualFree

user32

GetActiveWindow
IsWindowVisible
LoadStringA
SendMessageA
SetForegroundWindow

gdi32

BitBlt
CreateDIBSection
CreatePen
CreateSolidBrush
GetTextExtentPoint32A
GetTextMetricsA
IntersectClipRect
LineTo
PatBlt
PlayEnhMetaFile
SetViewportOrgEx

shell32

DragAcceptFiles
ExtractIconW
FindExecutableW
SHGetDiskFreeSpaceExW
SHGetFileInfoA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ