7af8a1860c411165aa89f2a88e591680 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7af8a1860c411165aa89f2a88e591680
Size

33KB
MD5

7af8a1860c411165aa89f2a88e591680
SHA1

93b94208327bff5fd59fbfd0ea5b8967b9896f31
SHA256

e2ddf485ec6ca7daef1ae4a7146075205a6b63b60a980e3b84d4b8802c2f9f5d
SHA512

868ba96093e158056a11a94ece82e4495eb1a3ce0ab59d1a27d1a3774fe8952db96713df667aefa6b304315ebcb621895c4304cd80b77116fbfa77221b928e7f
SSDEEP

768:7lIGpJ3bZy1SAP6Cb2ye/w4UbDN3jKgUjIjQ0+GtmZuAZonC:5xJLY1SAyQ2yGwRzhIGtvC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7af8a1860c411165aa89f2a88e591680

Files

7af8a1860c411165aa89f2a88e591680
.exe windows:4 windows x86 arch:x86

2ec251c946ee25dec80fd304c1fc008a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

user32

GetWindowLongA
GetForegroundWindow
GetClassLongA
wsprintfA

gdi32

GdiFlush

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ