7e4ccb5fa569b1744a42f12d8bafd89f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e4ccb5fa569b1744a42f12d8bafd89f
Size

165KB
MD5

7e4ccb5fa569b1744a42f12d8bafd89f
SHA1

7e0a9daaf316ac5846c70e266f153466d781167b
SHA256

a569b48bcca3c21a0c8b602941c4c98e009caab94d13f1aa3b791cd8df9e10a0
SHA512

17182e4472ee38f2f17b8464e7b36096ac6a7abe04c2286185bd5bd1dc1710afa74297c6dc9a13d58c3abe4643dde469e890cf3e5cfdd1f8d0ca56bc4192b2b4
SSDEEP

3072:RFTuo5OwURetHbgbJUITARQc2vueuDcZhIHIwOuJ3eB5Iex2QtJRGSz73Zh/BYOH:3tCsNgSVGvuo7IHV9NerIBQj9Jh/BY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e4ccb5fa569b1744a42f12d8bafd89f

Files

7e4ccb5fa569b1744a42f12d8bafd89f
.exe windows:4 windows x86 arch:x86

cf202e9fe27fba8ae9c4d10ac4c5df04

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalHandle
GlobalGetAtomNameW
SetFilePointer
FindFirstFileA
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
WriteFile
EnumResourceTypesA
IsDBCSLeadByte
WideCharToMultiByte
CreateMailslotA
ReadFile
EnumResourceLanguagesW
GetModuleHandleA
lstrlenA
FindNextFileA
FindClose

oleacc

AccessibleChildren
CreateStdAccessibleProxyA

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ