7792b35a57acbd7c68eff48b1fb4fffa | Triage

Sharing

General

Target

7792b35a57acbd7c68eff48b1fb4fffa
Size

15KB
MD5

7792b35a57acbd7c68eff48b1fb4fffa
SHA1

966a46fe5d1bbf57461b9e6b3be13a01d4019d55
SHA256

719ae07699f6884ece4a85b35d7637cb62ec5056d198c94d75085c86c566f278
SHA512

ffa8ff20237e1f99adeb40b5cf7e69e0ee1b24b8037d4eb5a6f5df2429761a5c665546e11807dbd92475b2631a3e71abb56be67d8f73a0088a3004cfce9cd476
SSDEEP

384:FRjqhkV+T9HRZddXhk1dhR1OlGspSraN:FBqaiHFdxwhSlGeS+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7792b35a57acbd7c68eff48b1fb4fffa

Files

7792b35a57acbd7c68eff48b1fb4fffa
.exe windows:5 windows x86 arch:x86

9b5f37aa61c143f9dd0bc042d7e7c814

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
MoveFileExA
HeapAlloc
MoveFileExW
GetCurrentProcess
HeapFree
WaitForSingleObject
GetSystemDefaultLCID
GetProcessHeap
WriteFile
Sleep
CopyFileW
SetFilePointer
ReadFile
CreateFileW
GetTempPathW
GetLastError
GetProcAddress
GetLocalTime
LoadLibraryA
DeviceIoControl
GetModuleHandleA
CloseHandle
DeleteFileA
CreateThread
GetFileSize
CreateFileA
HeapCreate
ExitProcess

msvcrt

wcsrchr
mbstowcs
sprintf
_stricmp
memset
memcpy

Exports

Exports

Start

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ