7a641dd3d017b1e3cda5f5187cb306b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a641dd3d017b1e3cda5f5187cb306b3
Size

57KB
MD5

7a641dd3d017b1e3cda5f5187cb306b3
SHA1

f4c389889655c540c983f5df7c4ab407f93f86e2
SHA256

ea2a22fbc3c0b26c428ca56c1eefffdf69b61d1c6861b2388b01bd1919203018
SHA512

a102c5e2d585266058547d1d2a11fe503b5fd0d3660aa136aed49dd793f2ae0545aa9f9e33e459ade23dd27271733e3a5429dc5bb5c6b434209d7bb9bda14657
SSDEEP

1536:jg8iM7Ju5Srp+qb/AJTlUQXJaMfJAN5ivOV49E:jAM1eVqb/alb5JdvOVAE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a641dd3d017b1e3cda5f5187cb306b3

Files

7a641dd3d017b1e3cda5f5187cb306b3
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE