7a8a0f2295d4e7252310574df14523be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a8a0f2295d4e7252310574df14523be
Size

91KB
MD5

7a8a0f2295d4e7252310574df14523be
SHA1

8743df0b10a4905febdd2c2a15ec1ad4b7acabc5
SHA256

8bcca4cd936b5f96b053abbb92f2fd53f7fd4a5a113e3ac6df92ee9251558e0f
SHA512

7a671f853cfa2b0b3d79a69147d8c4c609db061ad6e84a0c1db1b7d4a806ba84735ad475e442ffa63db605031f18f7b2f75b16de126dce28c7ad2f75873b10bb
SSDEEP

1536:5xb3e0s/AzErga1woi20OCErhFlctDTVR+ilOjLVgHiF:veR48JkLEru1kiZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a8a0f2295d4e7252310574df14523be

Files

7a8a0f2295d4e7252310574df14523be
.exe windows:5 windows x86 arch:x86

b948015f84270484ad5053ef7ffe2212

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

V:\GnrNgffm\dzyie\tuSdeEyo.pdb

Imports

shlwapi

StrSpnA

kernel32

SetHandleInformation
GlobalGetAtomNameA
GetTickCount
lstrcmpiA
HeapValidate
GetCommState
lstrcmpA
SetThreadAffinityMask
FindFirstFileW
WaitForMultipleObjects
GetComputerNameW

user32

DestroyAcceleratorTable
GetDoubleClickTime
PtInRect
InsertMenuW
LoadBitmapW
ValidateRect
ShowCaret
DialogBoxIndirectParamA
SetMenuItemBitmaps
GetKeyboardType
CharPrevW
ClipCursor

gdi32

GetNearestColor
PatBlt
CreateDIBitmap
GetMapMode
EndDoc
GetTextMetricsA
GetTextMetricsW

Exports

Exports

?szoxlrto@@YGI_NPAN@Z
?rntpgdLiRnT@@YGHJ@Z
?tGeOTtolowLbrydG@@YGPAXIPAF@Z
?NhhezwkuiiRcisXbZckQfj@@YGPAX_NPAH@Z
?oBePasnjXnMiu@@YGNIG@Z
?qwmixsfz@@YGPADJG@Z
?tWZkaqbCerijveiwaTpB@@YGPAMPAK@Z

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ