7a9a7770748c2db0d5952c574b67afde | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a9a7770748c2db0d5952c574b67afde
Size

56KB
MD5

7a9a7770748c2db0d5952c574b67afde
SHA1

007cffbd37362e419c0ab172587f1b5b5abcac63
SHA256

a68ac90115ed0bef35a5b19255f481a57992f4a81120662f15aa5fda9e5b6b70
SHA512

f005e3f1ad53f25b703e7976c278a20e56cd179928909e52c5c5726af77351272f8d3ae6348b65402e07e17b0b0f3043806647cb74d720f6a11dd2576e47d0a3
SSDEEP

1536:Sg/FHAV7+gyqjKKKKKKKKKKKKKKKKKKKIUDQ47Nik8lpB0:1/t2vUDn5GpC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a9a7770748c2db0d5952c574b67afde

Files

7a9a7770748c2db0d5952c574b67afde
.exe windows:4 windows x86 arch:x86

4c7c179f0127b28ee6f5bf78efbda5d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

shell32

ShellExecuteA

Sections

CODE
Size: 17KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE