07b46d0ebbcc05059103fd3ba36023aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07b46d0ebbcc05059103fd3ba36023aa
Size

809KB
MD5

07b46d0ebbcc05059103fd3ba36023aa
SHA1

41714b6353063b84d99e44e47fe0d0d74993265a
SHA256

52472f4e00101c39da1a0777095a4b1649d62d91dd565e2265de96dc06e9676a
SHA512

e2dd5e7c204959bb55d29f2fb0b3f0695f1f6556611f20f92149c99a42db61a7285ae90ff5dee64c1e8aba0765072c4faf2f61b0f4e7212af6eb98335eee2bcc
SSDEEP

24576:UmiP3mlrOavqXDJNJguocEx0FlLk/kVqIEuN7:Mfe54DXJ5occ0TGkVP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07b46d0ebbcc05059103fd3ba36023aa

Files

07b46d0ebbcc05059103fd3ba36023aa
.exe windows:5 windows x86 arch:x86

6495b8cae7cc01a0d21d6844f2b67c51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GlobalAlloc
GetTickCount
TerminateProcess
RtlUnwind
HeapAlloc
CreateFileA
ExitProcess

shell32

SHBrowseForFolderA

crypt32

CertFreeCTLContext

iphlpapi

AddIPAddress

secur32

CompleteAuthToken

powrprof

GetPwrCapabilities

Sections

.text
Size: 799KB - Virtual size: 799KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bzzx
Size: - Virtual size: 954KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 894B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ