7798d114a94083b9b9869e12f8080969 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7798d114a94083b9b9869e12f8080969
Size

17KB
MD5

7798d114a94083b9b9869e12f8080969
SHA1

680d9c413a3956837e29c074977cd1543fc5e300
SHA256

f9583d58a49bf3b6bd8a5bae0d0d4caa335313bbe654afef5af0d677150b9495
SHA512

dfb0303308dd3b6aadf66c7bbed758a3540fc6b3133beccc35cc2308d875cbfa3fe2263dad0b605befc90973ea0e471efae663651061d1cd4540bbd666856965
SSDEEP

384:vWPCXAIfw8la462UXd9vu0MhSFKxQGGZfWwY:vWP1Ifw8lgtJbF2Q5db

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7798d114a94083b9b9869e12f8080969

Files

7798d114a94083b9b9869e12f8080969
.exe windows:4 windows x86 arch:x86

a7834d3d067143f6b2f068f7e2e4331a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GlobalFree
GetThreadLocale
lstrcpynA
GlobalUnlock
GlobalAlloc
GetModuleHandleA
GetFileSizeEx
GlobalLock

tapi32

lineSetCallData

user32

CallNextHookEx
GetMenuState
GetMenuCheckMarkDimensions
GetInternalWindowPos
GetWindow

Exports

Exports

Hhvbxiu
InitWjmrcyqbtu

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ