7f04e7011ba985edacc40dff0fbd7f9b | Triage

Sharing

General

Target

7f04e7011ba985edacc40dff0fbd7f9b
Size

316KB
MD5

7f04e7011ba985edacc40dff0fbd7f9b
SHA1

d6312370f42f59110fd12361be02eefcbe66ad3a
SHA256

e142d3fb664c4a5d468fd051110c168c9ac4c84948d27fa20023ed764ae31c7f
SHA512

604cc7a7a70670d0aade203640dc9ffe682e04e9731ccff95a97ee0a1cb20569f1304df3b9207da0b52eac6510bafa8e9cdd861c87ee2913f606afe209744b8e
SSDEEP

6144:FlrSHHHHHHHnvfCDD/e7tbGJN4IoXPzwbBZygJczR5jBNTkCs+sEXEA461pgZfym:FAHHHHHHHnOekQlXPzufcbnhNXEV2Eb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f04e7011ba985edacc40dff0fbd7f9b

Files

7f04e7011ba985edacc40dff0fbd7f9b
.exe windows:4 windows x86 arch:x86

26dd17317b536d658baf4b5bafb81880

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
SetErrorMode
GlobalFree
GetStdHandle
FindFirstFileExA
GetLocaleInfoA
ReleaseMutex
EnterCriticalSection
SetEvent
Sleep
GetLastError
GetACP
GetSystemDirectoryA
VirtualProtect
InterlockedExchange
FindClose
RaiseException
RemoveDirectoryA
ResetEvent
GetCommandLineA
HeapCreate

user32

FlashWindowEx
GetWindowTextA
wsprintfA
GetCursorPos
SetActiveWindow
ReleaseDC
GetWindow
GetClassNameA
EndPaint
IsIconic
SetForegroundWindow
ValidateRgn
GetParent
BeginPaint
GetFocus
DrawTextA
FrameRect
ShowWindow
FillRect

dnsapi

DnsIsStatusRcode
DnsFree
DnsApiFree
DnsStatusString
DnsApiAlloc

clbcatq

CoRegCleanup

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ