7bbb1f21a9ae7e10c621382575dc8318 | Triage

Sharing

General

Target

7bbb1f21a9ae7e10c621382575dc8318
Size

197KB
MD5

7bbb1f21a9ae7e10c621382575dc8318
SHA1

f7163dcef994242eceba4287835f210f10ac6ae4
SHA256

7df580e5fafb4dfbbbb53031d7ef5809043c83f4ded9f6762935a5c0ce49a9ad
SHA512

4ac1f77d0fa67062f9f4f965e462f890fa230fc774eb0a4a057401a3265945f2f2593f37ed87984c315b817e65059bc423cffae20695a51ddfc112249875fc82
SSDEEP

6144:TESU8TaKvavtlHFvjhSBWfviynbiOVuFPL:gSU8DvMlHFv1SBWHi61VuFPL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bbb1f21a9ae7e10c621382575dc8318

Files

7bbb1f21a9ae7e10c621382575dc8318
.exe windows:5 windows x86 arch:x86

2ff5dcd5af64431cbd07303464bbfd18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrSpnA
PathSkipRootA
SHCreateStreamOnFileW
PathRemoveBackslashW
StrCSpnIA

user32

CharLowerBuffA
GetProcessDefaultLayout
DefDlgProcW
SystemParametersInfoW

kernel32

VirtualProtect
GetSystemWindowsDirectoryW
WriteConsoleA
GetVolumeInformationW
VerLanguageNameA
CreateProcessA

gdi32

EndFormPage
GetMetaFileBitsEx
GetCharWidthInfo

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ