7b1fb3bbcc4041a2a6a2ecfdc88fb958 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b1fb3bbcc4041a2a6a2ecfdc88fb958
Size

338KB
MD5

7b1fb3bbcc4041a2a6a2ecfdc88fb958
SHA1

9e215907c78bde203b2511aef0c50e43e222a3c6
SHA256

5795862dd56769e5e4b83f6c265784bff95a32fba8cd39fda0fe3ce2f57562d1
SHA512

5c8f15bfa41e895edcc8b40da75c8b5208584f813a4b8078136e0a335f8d34833f23328fd0ae06d9b85d57b6ac0b8735b22d4372afc7b4fde672a8918ed6d9bb
SSDEEP

6144:TE1Z7upy6TKKqXTWLXA5Iz8RuuJ9PdyuO6gtRgntmc6wGS0kUqfIU5R7n:TEO06IWLwSG9PCtRKt567j65Bn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b1fb3bbcc4041a2a6a2ecfdc88fb958

Files

7b1fb3bbcc4041a2a6a2ecfdc88fb958
.exe windows:4 windows x86 arch:x86

e315b24704dceebc077eb7f325619d2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_stricmp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
_makepath
_wmakepath
wcscmp
wcscpy

kernel32

GetCommandLineW
HeapAlloc
GetProcessHeap
GetCurrencyFormatW
HeapReAlloc
HeapFree
IsValidLocale
GlobalGetAtomNameW
GlobalDeleteAtom
SystemTimeToTzSpecificLocalTime
RaiseException
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetStringTypeExW
MulDiv
Sleep
GetTickCount
GetCurrentThreadId
LocalAlloc
LocalFree
GetLastError

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarWeekdayName
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 236KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE