7a80b03f52c0aaaf8ede359416ed8b7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a80b03f52c0aaaf8ede359416ed8b7d
Size

264KB
MD5

7a80b03f52c0aaaf8ede359416ed8b7d
SHA1

4f9e06f89d56bcc771deeb2eb9ad480315088280
SHA256

7fe6a4ef57f3d8bcabebd0b4d7147fcdfd8d8e9eac1e845922def2b292798e26
SHA512

80c216579e8c710c33265b9552a1e6929426fd4be51743fecd6cca89ac8472ee4b5da4d74f9a502641c339cf82fb1444cdac227be1dda5b6d026eac282e10f94
SSDEEP

6144:BxN3jb/5oIyExuKz9TBwwk8MXoOvausHIpTR6w/JR2:Z3jN9xuaXwwkj3vTsHcFBR2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a80b03f52c0aaaf8ede359416ed8b7d

Files

7a80b03f52c0aaaf8ede359416ed8b7d
.exe windows:4 windows x86 arch:x86

0816a75abbba6051996f3e1aefa1aa14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetStartupInfoA
SetFilePointer
CreateFileA
GetCurrentProcess
WriteFile
GetVersion
lstrcpyA
TerminateProcess
SetHandleCount
GetModuleFileNameA
GetCPInfo
LCMapStringW
MultiByteToWideChar
GetStringTypeW
GetCommandLineA
GetACP
GetStdHandle
lstrcpynA
lstrcatA
lstrcpynW
LCMapStringA
GetFileType
GetStringTypeA

user32

CopyRect
CopyImage
CreateIcon
DialogBoxParamW
DrawIconEx
CloseWindow
DrawTextA
GetWindowTextA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ