7621fbbf5c68d93301231d7c8854b242 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7621fbbf5c68d93301231d7c8854b242
Size

174KB
MD5

7621fbbf5c68d93301231d7c8854b242
SHA1

588c207e39718626f07657aa5dd683797ff9d62a
SHA256

c804f600ebd026b05756c54b9428ad225fff344e82fb0ecf9791441da221b552
SHA512

717f13861bdbe06a8fdb937c09f07907b5d76c7401f372b6ec694d6725a5a63023927ba90390e1b5b1d9789676644a2d3fb9374275a505f7addedb23bc1b4fe2
SSDEEP

3072:ISvJSwn6gwgKY0EqOvMvjZQX+9l4bJmkTRlq2m63gihyq2884I:Wk6gwlTovqQ+G9/q2mFg2p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7621fbbf5c68d93301231d7c8854b242

Files

7621fbbf5c68d93301231d7c8854b242
.exe windows:4 windows x86 arch:x86

0372ac2ad0479b8fcd5622c08fec4a8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
GlobalAddAtomW
LoadResource
FindResourceExA
GetModuleHandleA
GetCurrentDirectoryA
SetLastError
GetProcessHeap
HeapAlloc
FindNextFileW
GetLastError
CloseHandle
EnumResourceTypesA
LocalFree
GetProcAddress
EnumResourceNamesA
InterlockedExchange
EnumResourceLanguagesA
FormatMessageA
GlobalFree
SizeofResource
HeapFree
FindFirstFileA
FindFirstFileW
RaiseException
GetCurrencyFormatA
GetCommandLineA
LoadLibraryW
MultiByteToWideChar
EnumResourceNamesA
Sleep

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status

user32

GetWindowTextA
wsprintfW
IsWindowVisible
GetWindowThreadProcessId
EnumWindows
wsprintfA

Sections

.text
Size: 93KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ