07bb5fa3d27049c6f3e2717c96829a38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07bb5fa3d27049c6f3e2717c96829a38
Size

49KB
MD5

07bb5fa3d27049c6f3e2717c96829a38
SHA1

b986bc2c55112d4f8a2802f39d5c31443497cb76
SHA256

db65530515e79e7fb7d433d2ec7463487b3b9b64013fc13aa47dda292a6be580
SHA512

8512ae80a47b25a6d4904cac13c92f34621d5a1f8e239b540832e26464899134d34a85aa4103487c09cb2eb93b3dcc112f5d5211f178c08f51dcd679da33f256
SSDEEP

768:84AQLcfQ/3Gh2IgZVvXezp8x5aRMs9ECnbFXpDdNGJaVw4Ua/iBzXizeQw:2IP8YFd8CMrbBXYs3Ua/Qzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07bb5fa3d27049c6f3e2717c96829a38

Files

07bb5fa3d27049c6f3e2717c96829a38
.exe windows:4 windows x86 arch:x86

0b7d258a349331e1afa4c9941e09f4e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

oleaut32

SysFreeString

advapi32

RegCloseKey

user32

CharNextA

Sections

.text
Size: 43KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

04qhlDo0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ