7b0c6478b9ab015933b4298e99083a11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b0c6478b9ab015933b4298e99083a11
Size

484KB
MD5

7b0c6478b9ab015933b4298e99083a11
SHA1

fc199a469d6487e02ba9118837145142b1dfa4de
SHA256

66cb9c79e1a2bda922ec773586cd6faa53b0ad270a2a9d35a06707159ca2bb4a
SHA512

0f45d128be433d4bc61fdda2af57543a8935681db151db8259f81d6adc8c641e199c21053b9381f25ba7388f445cb8d781e5389b9ffcd1e13e574d5af108ad05
SSDEEP

12288:qkXb1EjpX32NSHZBnkrJov1EiicMD1CF6ixae5HWqn:vb1EjINSHnkrJCnGD1CFzxV5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b0c6478b9ab015933b4298e99083a11

Files

7b0c6478b9ab015933b4298e99083a11
.exe windows:4 windows x86 arch:x86

3260af0756adb30bf2da2ef6da3fd7e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetForegroundWindow
IMPSetIMEA

ole32

CreateItemMoniker

kernel32

GetThreadLocale
GetCurrentThread

Sections

.text
Size: 481KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE