7168fb4f18257232d9ce5fad52e9bae9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7168fb4f18257232d9ce5fad52e9bae9
Size

8KB
MD5

7168fb4f18257232d9ce5fad52e9bae9
SHA1

17a167e746187a16e0cbb08fcb1170f42a15d49e
SHA256

cedf0964c3b8554edea5c9e282e765ba2b7d5e0cb8fa9a7e7b0d22ecd35cdb18
SHA512

630f525ad893307f975e3f6ead1e803e75b62d31bda66728714321a1bb2fced4151d77303025a93efd3d29331d00e47870b7f58ca23859604bde912fa65ac067
SSDEEP

48:ytkyBXYTRKwYXxaDf3qce9YXXRuRuRuRXRuRuR/WRuR/WR/jjglUBMhl+wQ:6pgUXkDf36ckkkBkk/8k/8/4U2hQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7168fb4f18257232d9ce5fad52e9bae9

Files

7168fb4f18257232d9ce5fad52e9bae9
.exe windows:4 windows x86 arch:x86

676da8b9e9726ba38d490e7c2d7b3f63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetWindowThreadProcessId
FindWindowA
wsprintfA

kernel32

GetModuleHandleA
lstrlenA
lstrcpyA
lstrcatA
WriteProcessMemory
CloseHandle
CreateFileA
CreateRemoteThread
CreateThread
ExitProcess
GetModuleFileNameA
GetProcAddress
GetTempPathA
OpenProcess
VirtualAllocEx
WinExec
WriteFile

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE