f7c5e4fdbeb5cb871d4130b243d81a13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7c5e4fdbeb5cb871d4130b243d81a13
Size

192KB
MD5

f7c5e4fdbeb5cb871d4130b243d81a13
SHA1

1733ff6534a2dd72ac2ac311bc00906db02e5cb3
SHA256

73f4a9306fbba7d9755399dd2db4d8689f13a42675b87a9022991f58a97c152b
SHA512

ea777cfaadd8b742eb6b5b289b62eb2a9566b63650e5b645617008f44eabef4189aa4b3ddf4bba7e22efa9a71e202286d2dfab6ec9a66a242b4ea5c01ce6ead9
SSDEEP

6144:wMcXNi1PspEOfUoXh9nzoN5g6PFDbFO4wlQx4a36/gc:Vcdi1SEOfjbk57o4wlQxHqYc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7c5e4fdbeb5cb871d4130b243d81a13

Files

f7c5e4fdbeb5cb871d4130b243d81a13
.exe windows:5 windows x86 arch:x86

de1e7e6ea3b465417c82deaa10465fa9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
CloseHandle
GetCurrentProcess
LCMapStringA
LoadLibraryA
ExitProcess

user32

SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegEnumValueA
RegDeleteKeyA
RegSetValueA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegCreateKeyA
RegEnumKeyA
RegDeleteValueA

Sections

.text
Size: 175KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ