7e146db91604b14b06d464779b0b8b85 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e146db91604b14b06d464779b0b8b85
Size

117KB
MD5

7e146db91604b14b06d464779b0b8b85
SHA1

316a9ac75bf23dd1fa18a0d09f37892128e7abc3
SHA256

73fc2ea00ec6cc81b46ffb5a5aaeecddc3d427d5373997c90a72272ad096e080
SHA512

dea80404b8458adeb307e0af4e7f8de57cfd5e40902e4a3c5001c01d9298ea15fe8112630b80e61291e63df641d0397f49dbdfdbac2891c004b75b7cbabca7f3
SSDEEP

3072:MTEIVows/GyZ/kQioXmZEJxHbG6zeCxOP:niowIZ3mGJx7GfCA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e146db91604b14b06d464779b0b8b85

Files

7e146db91604b14b06d464779b0b8b85
.exe windows:4 windows x86 arch:x86

b442073a89e36ca6dd94cb9d2f181138

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
TerminateThread
TlsSetValue
GlobalDeleteAtom
HeapDestroy
SetLastError
EnumResourceNamesW
GetCommandLineW
SetHandleCount
ExitProcess
TlsGetValue
TlsFree
HeapCreate
GetStartupInfoA
GetCommandLineA

oleacc

LresultFromObject

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ