7698db7de05800a78cbc211953d526ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7698db7de05800a78cbc211953d526ab
Size

54KB
MD5

7698db7de05800a78cbc211953d526ab
SHA1

aaab5bd2ced5936180623372975c15d2be9c2526
SHA256

a7bb2070731aa2b18078b829115a1234d78c917d98113eef9f5a97b22d972516
SHA512

94ca6cc14b245aecb0cc715e8bb84dc7f9e26bfe75b0f25a0cfd82c05c976df292bdec7762e33e74cb8c0a632b5e530fdc491df4aaeda5675de950fc70b4a539
SSDEEP

1536:1poRIV6hqDX+TGGrgM7fqibi+ellPeB2DNRYYNJh:1eIgxGGd711elpe0zYYNJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7698db7de05800a78cbc211953d526ab

Files

7698db7de05800a78cbc211953d526ab
.exe windows:5 windows x86 arch:x86

0d5c8a208ca1c6289ff4fc3741037fe2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA

shlwapi

PathCombineW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CharLowerW
EndDialog
GetClassNameA
GetForegroundWindow
GetKeyboardState
GetWindowTextA
LoadCursorA
MsgWaitForMultipleObjects
OpenDesktopA
OpenWindowStationA
SetThreadDesktop

Sections

.ctwj
Size: 44KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ipqpsz
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xmn
Size: 6KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ