f7121aa888467a7a17be221726877db6 | Triage

Sharing

General

Target

f7121aa888467a7a17be221726877db6
Size

315KB
MD5

f7121aa888467a7a17be221726877db6
SHA1

e0fa85767b2ddd82a256a0292d0743b6708adcd8
SHA256

6c7bca3a44d65bee3504ebf21bc21b862694226eba56a9b6c208d48e57e9faa3
SHA512

65fb0d60e527a6df656e27cf4929ccc542442a63657abd31200468361106d612355143769c16ffd3033a26ba6ed1cc5d3474f9d0e8913726000500d27c5178ec
SSDEEP

6144:vXDXL0BvnjbJDB7VHMkzQB9qnuI3/3Rn:7b0BPjb37ykeurf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7121aa888467a7a17be221726877db6

Files

f7121aa888467a7a17be221726877db6
.exe windows:4 windows x86 arch:x86

f0c81b6f8530eba9d7b8894954822d1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

shell32

Shell_NotifyIconA

Sections

.text
Size: 150KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE