7aa8adc40a7f104f0a96d54bb5562470 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7aa8adc40a7f104f0a96d54bb5562470
Size

814KB
MD5

7aa8adc40a7f104f0a96d54bb5562470
SHA1

6885e082ec591b3fc61650bcf82575ed1112173b
SHA256

507c475b12ee8d3684d8356decb62bbd7f985f4ab1d988d0c445198609eaba63
SHA512

6ba361b484182d3569ceeb002a5c005a5e09d092426889270f77294d91ce4c71b4bfe20c18db901f67d6e6ceba72b2d2ce2a85efe1d1df75284ce110f4e91378
SSDEEP

24576:kaNFJBjV3flfvFKf9EWj/rY4HDRhEUmnPCYIarLa:kaDVtVKzj/82hXMx9rLa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7aa8adc40a7f104f0a96d54bb5562470

Files

7aa8adc40a7f104f0a96d54bb5562470
.exe windows:4 windows x86 arch:x86

a021ab8eda213d31c764b1349f3ec548

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
TlsGetValue
FreeEnvironmentStringsA
ReleaseMutex
SetLastError
GetACP
LocalUnlock
HeapDestroy
FindClose
CreateMutexA
Sleep
CreateFileA
GetModuleHandleA
HeapCreate
FindResourceA
LoadLibraryExW
GlobalFree
ExitThread
SetConsoleCursorInfo
GetLastError

user32

GetDlgItem
DefWindowProcW
GetIconInfo
DrawEdge
CallWindowProcA
IsWindow
FillRect
DispatchMessageA
DrawMenuBar
CopyRect
GetDC
CheckRadioButton
GetFocus

uxtheme

GetThemeRect
DrawThemeIcon
DrawThemeText
GetThemeSysInt
DrawThemeEdge

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ