7a787d78adac71c5ed76cf584dbb39e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a787d78adac71c5ed76cf584dbb39e5
Size

8KB
MD5

7a787d78adac71c5ed76cf584dbb39e5
SHA1

24226e96541d8779b1c636a7941ff34cdd3446f9
SHA256

6a71b720b4a1fbb1730897b9685a1850059f10bd4bfc659cfbd13d6afaee0eb7
SHA512

339408b87d443bb368faa308be721669cbbc6b15dfc9dcc79d037ec9ccdffce40c5bd804bc36e5ecd245a6600001cd03aacdd60ed31c8e25be90ff8fc9fad8d0
SSDEEP

96:r6q9QmFz+cdliFbhz50mibaS0BVuaahY/7a8Rm7LhhedAo7cqLe1pbVKqMwCtl:v9OaiF1z5viJ9mTmfhKWue1pjel

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a787d78adac71c5ed76cf584dbb39e5

Files

7a787d78adac71c5ed76cf584dbb39e5
.exe windows:5 windows x86 arch:x86

9d8ed46e4b81b522b5aba48908018c65

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
ExitProcess
GetModuleHandleA

user32

DefWindowProcA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ