07a6a82fc9c14b0c106e8d5b1ebb450b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07a6a82fc9c14b0c106e8d5b1ebb450b
Size

38KB
MD5

07a6a82fc9c14b0c106e8d5b1ebb450b
SHA1

127321061d9c4c9b06a3e41fc0589881082d4e8c
SHA256

f8e2aa11353b7e5332f33ec3f83e0b00811be4fd578514a38e9d0fbb48cf71ca
SHA512

d47c9aadf4595abc8bd0b01c3d7b3b0c378708c2ee8dabf37d34ef7995ba06e67fc094f6156bad2e47136f5d7be6aa36ed84059b4fd057d8c9fcf61afe836ca3
SSDEEP

384:Qj8+4wiUpjsvAoJMGqcW08uAe0atoS+l5jeVfSL5hDssxO4zF0DrykXtHrWdP7It:QES45IG0RjeVfSL5hDtk8iOkVrWRb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07a6a82fc9c14b0c106e8d5b1ebb450b

Files

07a6a82fc9c14b0c106e8d5b1ebb450b
.exe windows:4 windows x86 arch:x86

231425377893abb7b2ff9764e70528f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetOpenEnumA

version

VerQueryValueA

wsock32

WSACleanup

winmm

waveOutSetVolume

Sections

CODE
Size: 28KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE