7a6e79e6765df793b222e9118f3cdddc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a6e79e6765df793b222e9118f3cdddc
Size

15KB
MD5

7a6e79e6765df793b222e9118f3cdddc
SHA1

a2b882833f023b792736647c8fe10a4462469bdd
SHA256

df4b806183ceb9873e37ae438d0c94f32e86bcef8aab187909396770c128ccc1
SHA512

c1dd1454352e8fd1e37ae5547e18d0f0aa98f6371775ee508dbefae161c51850841018fa47cd0ef5f06906063ef63c53a5fb4435be664ddbe09dc8f40c8cdab3
SSDEEP

192:JVmlvIjjALc4ZFguBREWpYujE/ozP4oynhzGK:7mHFguBhmuj4w4LN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a6e79e6765df793b222e9118f3cdddc

Files

7a6e79e6765df793b222e9118f3cdddc
.exe windows:4 windows x86 arch:x86

f072d8645112608cd2207a8d43676ebb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
WinExec
CloseHandle
WriteFile
CreateFileA
LoadResource
SizeofResource
FindResourceA
ExitProcess
GetVersionExA
CreateThread
lstrcmpiA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
DeleteFileA
MoveFileA
FindFirstFileA
CopyFileA
GetModuleFileNameA
MoveFileExA

user32

PostMessageA
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
PostQuitMessage
DefWindowProcA
BlockInput
keybd_event
FindWindowA
ShowWindow
DispatchMessageA

msvcrt

_mkdir
_controlfp
_except_handler3
_strrev
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
memset
strlen
_exit
_XcptFilter

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ