f7af1650f9f7f8208e646d1092c3c64d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7af1650f9f7f8208e646d1092c3c64d
Size

56KB
MD5

f7af1650f9f7f8208e646d1092c3c64d
SHA1

779383c06321fd2efc0c4ccc764ff61be6ca7ae0
SHA256

39ee00b405a738a382f220ea3212564b334120ea0244fa8dfe4b0196105fb20d
SHA512

3db2b13f6bc67c68ba9216331e50eed64cbab55ddec561db624fba4424fd6b633b6fea2884fe66847fc0be3d8acc47ed0257a9e07c50665f7a5a1509435f78e5
SSDEEP

768:v3Nl57q8uO2gdN6r9B3Nl57q8uIGGgdN6rt:vlGE2wilGaGGwA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7af1650f9f7f8208e646d1092c3c64d

Files

f7af1650f9f7f8208e646d1092c3c64d
.exe windows:4 windows x86 arch:x86

d46d1d889c5fa90e3944ca716af7fc89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetACP
ReleaseMutex
GetEnvironmentVariableA
LocalFree
lstrlen
PulseEvent
TerminateThread
GetModuleHandleA
SetLastError
GlobalUnlock
CreateMutexA
TlsGetValue
FindClose
HeapCreate
LoadLibraryW
CreateFileA
CloseHandle
IsBadStringPtrW
FindResourceA

user32

FillRect
GetDC
CopyRect
DrawEdge
GetIconInfo
SetFocus
DispatchMessageA
DefWindowProcW
IsWindow
CallWindowProcA
CheckRadioButton
GetDlgItem
DrawMenuBar

msasn1

ASN1BERDecNull
ASN1BEREncEoid
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncBool

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eytlhof
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE