7b316fd93934973eecae501de07b2548 | Triage

Sharing

General

Target

7b316fd93934973eecae501de07b2548
Size

1.4MB
MD5

7b316fd93934973eecae501de07b2548
SHA1

6527831d24beeb5bf9d3845f1bbecfc5001c1bba
SHA256

4d3854d2a75855f1b230fb2c80888a03bebdbf634e3c27b83029191b386fb85c
SHA512

909f1cf0ac71990039a2b5b8cd0fa7ba4eb68941a5bc10e69ff0cc1a34d96e966538d67c865c50f842ea4e32c6f4560bf4f5cb98b87bdc8285061be040cf7803
SSDEEP

24576:SBCPUeajDxqaHnV+3flhwa1Jm45r7oV68VWcDXY+Ok7khd5:NPhajDxq4VC9hH+45PoV6wUL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b316fd93934973eecae501de07b2548

Files

7b316fd93934973eecae501de07b2548
.exe windows:4 windows x86 arch:x86

138e4a7206e25dc2e617507c025a11b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
Sleep
DeleteFileA
WaitForSingleObject
CreateProcessA
lstrcmpA
SetEndOfFile
SetFilePointer
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetLastError
CreateFileA
lstrcpyA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA

shell32

ShellExecuteA

msvcrt

__p__commode
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__dllonexit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1002B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fyf
Size: 696KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fyf�
Size: 700KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE