7316045796db2c1b4925da867d5f1e00 | Triage

Sharing

General

Target

7316045796db2c1b4925da867d5f1e00
Size

16KB
MD5

7316045796db2c1b4925da867d5f1e00
SHA1

654d89c205e1c0580124eca1439d938b3d9c3427
SHA256

cb840f2c88ad165945b3df141b8cb5f3a29ea7e29943bafcae7f35bc75a46679
SHA512

c656980990009ff84ab5002d459e93c4a45276ecb05baad384c227a1d840261906293e2128463677ce2e3948dc6855fa2f5f3a0e5a0e2cdefe729a14a5f19869
SSDEEP

192:f8cnUbL51Z8F274/JQtCBdH0dHRdHwdHPH1SdHK18G+j5P:fVnK51Z8jxQtCBqrmuw+B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7316045796db2c1b4925da867d5f1e00

Files

7316045796db2c1b4925da867d5f1e00
.exe windows:4 windows x86 arch:x86

40c3e825b117e42d1038dc7e7c689122

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
Sleep
CopyFileA
GetLastError
ExitProcess
CreateMutexA
OpenFile
FindClose
FindFirstFileA

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE