7800ac8ebc4bb136ae5b3d63d4296644 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7800ac8ebc4bb136ae5b3d63d4296644
Size

118KB
MD5

7800ac8ebc4bb136ae5b3d63d4296644
SHA1

6a2fe12f35e69bed448fa79c5b5ebb9ee3845c30
SHA256

480e2eb58ad4242f712f2bc5d8ff075f2e2698ed1964c0f2a52da3e158fc9940
SHA512

ee3c5b38445948075af5a5e728b7e755b3e2b4b22e1a6cd2380957731a42ef71acb20333a9ba4c188efc4854547880704a556b083bc04f7b666b4f4828743f3d
SSDEEP

3072:2HRonMMrCWl08rGZ2TOWdYJkSBz1id7SjhmVL73yJ3u7D:mpFVMbOQdmj833yJ3u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7800ac8ebc4bb136ae5b3d63d4296644

Files

7800ac8ebc4bb136ae5b3d63d4296644
.exe windows:4 windows x86 arch:x86

35a4942e0773bf7ba132e0584d0e06a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineA

shell32

SHLoadInProc
ExtractIconA
ILGetNext
FindExeDlgProc
PathIsSlowA
PathResolve
SHAlloc

user32

CharToOemW
CreateIconIndirect
FindWindowW
GetClassWord
DestroyCursor
GetMenuState
GetUpdateRgn

Sections

.text
Size: 68KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE