7a4fd853384f075b53fa35d13edf38bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a4fd853384f075b53fa35d13edf38bc
Size

57KB
MD5

7a4fd853384f075b53fa35d13edf38bc
SHA1

228ad3306b59f1ae80acb7613ef0e906f66cd2d5
SHA256

3ba71ee67308ed7d8fd340669e66c0832400e77cf63f93c5fe3e51aeca9d7e0e
SHA512

7429e2ffb989ff950f40a68bad9a5843f1e0a10cd584369995d4eb8945c0dbc25fd458e51d9c75c359e306f5029e79b113d24d2532b52d5fd688913621444fe9
SSDEEP

768:zp6L57q8uUf1dN6r9iXW9ofVj38XXypW9kzileYE+IeF0bbZX7zU:FUGS9jm9oF38ILGle/wkzU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a4fd853384f075b53fa35d13edf38bc

Files

7a4fd853384f075b53fa35d13edf38bc
.exe windows:4 windows x86 arch:x86

2cb3806c22e8dd434291c326e768ffc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
CreateFileA
CloseHandle
IsBadStringPtrW
TlsGetValue
LocalFree
FindResourceA
SetLastError
LoadLibraryW
GlobalUnlock
GetModuleHandleA
lstrlen
PulseEvent
GetEnvironmentVariableA
ReleaseMutex
FindClose
Sleep
HeapCreate
GetACP
CreateMutexA

user32

CopyRect
CallWindowProcA
IsWindow
DrawEdge
CheckRadioButton
DefWindowProcW
DispatchMessageA
SetFocus
FillRect
GetDlgItem
GetDC
GetIconInfo
DrawMenuBar

msasn1

ASN1BERDecNull
ASN1BEREncEoid
ASN1BEREncBool
ASN1BERDecBool
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE