7c4b2227a04ee98304f677535e3b310c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c4b2227a04ee98304f677535e3b310c
Size

20KB
MD5

7c4b2227a04ee98304f677535e3b310c
SHA1

39c60f874e1167bc8bf22a7185e41c93b55bf26c
SHA256

e413f292f71bdc7873646116ba637864e374e30b66d45ac67bbf235a4f03b3a4
SHA512

28936e3122740f631cb2edd657e9c04417e31a8e4b57a7e1ec0139a6874aec7f895f6306e907edc404d3b15be8d443813866c1c60dda10f2af1778917986e2ad
SSDEEP

384:q1BYYwq4SmDXaqXJuQjxwQNUlSyj4Ln8YIa+Qc9C15xA:Pbq4SGXaq5uYxtql14KC3i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c4b2227a04ee98304f677535e3b310c

Files

7c4b2227a04ee98304f677535e3b310c
.exe windows:4 windows x86 arch:x86

ec9b0457cd6c7358aa264ebfa13dd349

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnlockFile
AllocateUserPhysicalPages
HeapCreate
SetConsoleScreenBufferSize
ReadConsoleOutputA
CreatePipe
Module32First
ConnectNamedPipe
GetNamedPipeHandleStateA
SetLocaleInfoA
GetCommandLineA
ExitProcess
GetStartupInfoA
CancelDeviceWakeupRequest
RtlUnwind
DuplicateHandle
GetHandleInformation
ReadConsoleOutputCharacterA
LockResource
SetVDMCurrentDirectories
FindFirstFileA
GetProcessShutdownParameters
GetVolumePathNameA

Sections

ATSEC0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ATSEC1
Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ATSEC2
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ