5a7ec7320f053ebfc9741d7713abeefb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a7ec7320f053ebfc9741d7713abeefb
Size

251KB
MD5

5a7ec7320f053ebfc9741d7713abeefb
SHA1

bb6b60169bf7019b3e18cb8b899f7a4957be0c7a
SHA256

74f34ccd0e8f34a64c19978436e1c9a928b0b062d74d6c706b0048ace9ad48fd
SHA512

e5ebd999dd148a3ad7d58bb08ea09883e8b4d1e320e39219af36b072a6ba7bf54fe844b5bd53888448d78f936e995d876cbdcffe36eab54fc6eef2d76ad39099
SSDEEP

6144:3weZ6ecYjhF8pGneViuZCLOKXkLhhdAF/J9YCCd3uv:LUVYUo2lZCLWhdOh9YCo3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a7ec7320f053ebfc9741d7713abeefb

Files

5a7ec7320f053ebfc9741d7713abeefb
.exe windows:4 windows x86 arch:x86

6483e7142e64f5033cd062bfbe726315

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
CreateFileA
GetCurrentProcess
ExitProcess
LoadLibraryA

user32

wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegEnumValueA
RegSetValueA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegOpenKeyA

Sections

.text
Size: 137KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ