7b61cb23b8389e29a5d7870ada6ab98e | Triage

Sharing

General

Target

7b61cb23b8389e29a5d7870ada6ab98e
Size

500KB
MD5

7b61cb23b8389e29a5d7870ada6ab98e
SHA1

55897e68926688ac5534d1f82a80a31b52d73535
SHA256

688485847e439db92e0b811a8d5f7a9cd69f451b3845e2a8a2a8b15ac9f9f252
SHA512

0b8459f3dabafe45645d6d65aa619ae919ce5ab8b6c6ff3bc3fab542a344909ef217bb7c894cb99954bcc93e947abd4a653b927b977cad05019dade6af4c11fc
SSDEEP

12288:rvEW4f/qepnpNQdaw1oKMl9OoNacdoUYRxK8:rvl4fCQppw16OojoUs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b61cb23b8389e29a5d7870ada6ab98e

Files

7b61cb23b8389e29a5d7870ada6ab98e
.exe windows:6 windows x86 arch:x86

35807dcde258f88fa3ce5c21adc607fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
GetConsoleOutputCP
GetLastError
GetModuleHandleW
GetProcessHeap
GetStdHandle
HeapAlloc
HeapFree
LocalFree
VirtualProtect
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

LoadStringW

Sections

.text
Size: 512B - Virtual size: 421B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ