7b14db38850baf7500caeb91462293ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b14db38850baf7500caeb91462293ce
Size

45KB
MD5

7b14db38850baf7500caeb91462293ce
SHA1

3a7d7b6c06d934589500adc5158b10a5884b151a
SHA256

4a580bdd64ed5fae69f367141aacdfeb6d682cb256ea7ed830fc74e43aec9708
SHA512

5f7d687162088680cf902c47495072b6b04237f626391fc3ebf26d75299aea67582959d0d921aef11e594197582609935c0b8bb2f10553efa559f0e58cd410cd
SSDEEP

768:rdEq3jKBK1wKWT9vkMMNC/gFn2aY6nF41qk5wrRtnMxz+uDGVr2SJpSYq:rdE6+BK1ZWTWMuhbF41n5wdtnMxCu+rr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b14db38850baf7500caeb91462293ce

Files

7b14db38850baf7500caeb91462293ce
.exe windows:5 windows x86 arch:x86

a7c6917f309b6afbac69fdb052592b70

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegDeleteValueA
CryptGetHashParam
CryptCreateHash
DuplicateTokenEx
CryptReleaseContext
RegCloseKey

shlwapi

PathCombineW
wnsprintfA
PathFindFileNameW
StrCmpNIW
PathMatchSpecW
StrCmpNIA
StrStrW
wvnsprintfW
wvnsprintfA
PathRemoveFileSpecW
PathFileExistsW
SHDeleteKeyA
wnsprintfW

Sections

.ohmjgr
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.erubkd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rabkt
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ