7ac738a0f448e7ae27fce5bb2efcd5a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ac738a0f448e7ae27fce5bb2efcd5a9
Size

268KB
MD5

7ac738a0f448e7ae27fce5bb2efcd5a9
SHA1

74345450a294907acf193557616ab1492c5dceba
SHA256

eb07fd95f97957ba9fc6832858d617d2e484962c2962b7fa1ce3dbe42f78f09d
SHA512

618ebd94e2b8f4da111df66f7ee2091f1dd57edcab00d853cd01b224590aae8b28827633e0227bac2172dbb610ca8028961779c18bf988b05cca6debf30e5a84
SSDEEP

3072:Er/LjuFgaJWKYh62IjMjL9ny9Q/2kKrCQiuDNDteTMAoJICLMg5VQ5uw:K/LiniGCL9nH2bGQiuDRoVCLfQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ac738a0f448e7ae27fce5bb2efcd5a9

Files

7ac738a0f448e7ae27fce5bb2efcd5a9
.exe windows:5 windows x86 arch:x86

9de9099082728103b0650f3892bb383b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
GetLastError
CreateFileA
FindAtomA
GetLocalTime
lstrcatA
lstrcpynA
lstrlenA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetTickCount
GetVersion
GetTempPathA
GetSystemTime
WaitForSingleObject
CreateProcessA
lstrcpyA
GetTempFileNameA
lstrcmpA
ExitProcess
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

wsprintfA
ClientToScreen
EqualRect
IsWindowVisible
InflateRect
GetCursorPos
GetFocus
GetWindowRect
GetCaretPos

shlwapi

SHGetValueA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 254KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE