7b94c73d0e52dcf569b10410e7fcbd1d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b94c73d0e52dcf569b10410e7fcbd1d
Size

56KB
MD5

7b94c73d0e52dcf569b10410e7fcbd1d
SHA1

64da337c6717103265eadd79ba3dee31b6537e53
SHA256

20b04b74ec0d8e7617af2395048b4e8e336445c474f5274ac0b57e2744014425
SHA512

46b7b08740c0e409d29491a5d7be374daf063069f00c3a228f707ad3a7733d2537620ae621528b50002d281629fccb60abd8df79e03ce83248f8bd1d64c3743b
SSDEEP

1536:N7Dc4d0D1e6o5IwpupJdVTA1LgUHWA9IwBnoG92+QEg:Jlw1BKp8VANgc9ING92+QH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b94c73d0e52dcf569b10410e7fcbd1d

Files

7b94c73d0e52dcf569b10410e7fcbd1d
.exe windows:4 windows x86 arch:x86

7a57983e10639aa6ea6395811d48ecdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
OpenMutexA
SetCommTimeouts
ConnectNamedPipe
Module32NextW
HeapLock
FreeResource
SetVolumeMountPointW
DebugBreak
GetConsoleInputWaitHandle
ReplaceFileW
GetVolumeInformationA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE