7392e629f2bcff9d1a1143f58b944fcc | Triage

Sharing

General

Target

7392e629f2bcff9d1a1143f58b944fcc
Size

24KB
MD5

7392e629f2bcff9d1a1143f58b944fcc
SHA1

108d0eb965034aec00f15ce911fe1d2021494d1c
SHA256

fc2ce470b73bd8477a3268d95b026f3563a20e936c65fdd2043aac596a2f62af
SHA512

51f05dd39f57a8b5d55bbfb074ad3ba89fe3e567d0f304c4e8f2fd04815c8c55268de272b9d3b1f810b3b8f3a8b8cc8574193e96b7832142fd3349cf9970b756
SSDEEP

384:BztFS3ZD2W8CGTebE3NLbU8+n5E/02Sb1vFuBg1r7je5D:7Fy29deb+NLj+002SbcWDeV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7392e629f2bcff9d1a1143f58b944fcc

Files

7392e629f2bcff9d1a1143f58b944fcc
.exe windows:4 windows x86 arch:x86

2667e22a4669ffb6e59edb0e759113d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetModuleHandleW
GetThreadLocale
GetStringTypeW
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE