fc7753f0a25e73313c112e950f4dcb82 | Triage

Sharing

General

Target

fc7753f0a25e73313c112e950f4dcb82
Size

274KB
MD5

fc7753f0a25e73313c112e950f4dcb82
SHA1

7bda237901f113c26d8ea2484fa7836d024734b2
SHA256

2035d6db87e2c859d451ce356d44e6e582c9f890253f2f0215496b4243f21a24
SHA512

d60fac34066470eabe75753ac083484f0973fe48c5ba9bbfcfbbaea415999c36d3dc4e1a41fd26bf9a7447ff67e12ac3a2a84cb2e4cdcb6eec4cbb2814215a7a
SSDEEP

6144:wjAbNIifXBAhxdI0Bb9682kNJIWQSv+F35pm:wj3if2hxmMb96pkfvsF3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc7753f0a25e73313c112e950f4dcb82

Files

fc7753f0a25e73313c112e950f4dcb82
.exe windows:4 windows x86 arch:x86

29cc8fca88318d961741bf8c6ad2d28e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameA
GetVersionExA
FindFirstFileW
InitializeCriticalSection
GetProcAddress
DeleteCriticalSection
LockResource
GlobalSize
MultiByteToWideChar
GetPrivateProfileStringW
LoadResource
GetVersionExW
GetTickCount
MulDiv
lstrlenW
FindClose
EnumResourceTypesA
FreeLibrary
LoadLibraryW
GetDllDirectoryW
WritePrivateProfileStringW
Sleep
GetModuleHandleW
GetPrivateProfileIntW
GetModuleFileNameW
LoadLibraryA
GetLocaleInfoW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

shell32

DllGetVersion
SHGetPathFromIDListA
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteW
SHFileOperationW
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteExA
ShellExecuteExW
Shell_NotifyIconA

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ