7796c014fc73ab755baf959abeff78b2 | Triage

Sharing

General

Target

7796c014fc73ab755baf959abeff78b2
Size

130KB
MD5

7796c014fc73ab755baf959abeff78b2
SHA1

c0115aafe0b614addc7fbb968edeeb43b916074c
SHA256

501116c22f896bcb7ed2e73efeea60915c4575778a7f95ea483361836b7c5282
SHA512

02ace1a488d6b92a0da979726fe0e287f4bcc89d56f031b73e1ce794a435d36cc70eb0348abe715410e69aad6f46fc4192fa6dc38db50d61dca03018e16e74fe
SSDEEP

3072:dE71+3kyT8gl0o90ZcQC+4hBVJWEt0UlTB:e71+0yT8glANA3VJWEt0Ul

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7796c014fc73ab755baf959abeff78b2

Files

7796c014fc73ab755baf959abeff78b2
.exe windows:4 windows x86 arch:x86

c20e3e55b5941414cddc2dba87caf094

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

OffsetRect
GetTopWindow
IsChild
LoadBitmapA
LoadIconA
OemToCharA
PeekMessageA
OpenClipboard
GetMenu
GetCapture

kernel32

SizeofResource
ExitProcess
GetLastError
CreateFileA
WaitForSingleObject
GetStartupInfoA
GetVersion
LoadLibraryExA
LocalFree
HeapAlloc
WriteFile
GetProcessHeap
GetCurrentThreadId
IsBadReadPtr
FormatMessageA
GetModuleHandleA
SetThreadLocale
VirtualFree
GetCommandLineW
VirtualAllocEx
VirtualAlloc

gdi32

LineTo
GetBkColor
GetDIBColorTable
SetBkMode
CreateBrushIndirect
SetTextColor
GetTextColor

comdlg32

FindTextA
GetOpenFileNameA

comctl32

ImageList_DrawEx
ImageList_Draw
ImageList_DragShowNolock
ImageList_Remove

Exports

Exports

_M4ZrNUhwA0
h0Z98

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ