7401e49a534de291810643a2c1103d7a | Triage

Sharing

General

Target

7401e49a534de291810643a2c1103d7a
Size

72KB
MD5

7401e49a534de291810643a2c1103d7a
SHA1

db16586c5d85e131ebec648a6602411d110e2b66
SHA256

32f6ef70f5ab872f21cf5fdc7e24b56409464d450ace86e4ca4ab436ad6f83d3
SHA512

00e531340d431c9bec6f1aeff614688e836cde477eb155cb2874423a72f540d473c30efe86fa7554ff2bc50e70773bfa75df904f3625a047e4a299f8761f9bd5
SSDEEP

768:tmAI5F7r2Vdbf2QOGUTDMVPcQFZUdvbQ/fM5dX+:tmb5Ff2GGUPMWLpbQ/UTO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7401e49a534de291810643a2c1103d7a

Files

7401e49a534de291810643a2c1103d7a
.exe windows:4 windows x86 arch:x86

c845aa8adfd876d2c91192a47e902163

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
lstrlenW
GetPrivateProfileStringA
WriteFile
GetCurrentProcessId
GetDriveTypeA
ReleaseMutex
FindAtomA
GlobalFlags
FindClose
CreateEventW
GetCurrentThreadId
GetEnvironmentVariableW
TlsGetValue
ReleaseMutex
HeapCreate
LocalFree
InitializeCriticalSection
IsBadStringPtrW
LoadLibraryW

user32

GetSysColor
GetSysColor
CreateWindowExA
GetClassInfoA
IsWindow
EndDialog
CallWindowProcW
GetKeyboardType
SetFocus
DrawTextA
GetClientRect
DrawStateW
DispatchMessageA

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

clbcatq

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE