7b57bc991974194d9e9dc9eecdb9e167 | Triage

Sharing

General

Target

7b57bc991974194d9e9dc9eecdb9e167
Size

1.2MB
MD5

7b57bc991974194d9e9dc9eecdb9e167
SHA1

2677029a1a646fb80229f17a8a51d8dae27692f7
SHA256

1a695aa714c1b4094fdca84c65f0c886968bbf0c6a450516c1cccb9d922f5b07
SHA512

5f4aaf374e79364f8fa4dabf25329b63253a494b946185a4ff443f7254613b8f80ad6fb1f0949564ffafee8f031b470e8e2b8b4c50d1a2d3dba8ebf7a7aff98a
SSDEEP

3072:XVE4ESPd/ykBX+gT8xposndp8WD0+aGUeVA/HfHQbu18:i47dHOgT0pJdp8WD0+aGt63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b57bc991974194d9e9dc9eecdb9e167

Files

7b57bc991974194d9e9dc9eecdb9e167
.dll windows:4 windows x86 arch:x86

d021cf1af92a2367b6cd8c629891c8f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ResetEvent
SetThreadPriority
SetThreadAffinityMask
CloseHandle
SetThreadExecutionState
lstrcpynW
Process32FirstW
RaiseException
SetConsoleCtrlHandler
Sleep
SetErrorMode
SetupComm

user32

ValidateRgn
GetWindowRgn

advapi32

SetSecurityDescriptorControl

gdi32

SetPixelV
SetROP2
SelectPalette
GetCurrentObject
RectVisible

msvcrt

__p___mb_cur_max
_wcslwr
_osver
_ismbcsymbol

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ