7e4d4392b7d6dcc6facd39d9346ca67d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e4d4392b7d6dcc6facd39d9346ca67d
Size

86KB
MD5

7e4d4392b7d6dcc6facd39d9346ca67d
SHA1

5108dc03d27cd8351c7772965aeac666e420dbc0
SHA256

b609aadf987b1dd776b90b4afd6fa4637f773af2317b9df1384732ee3e66e431
SHA512

62c753d2d5d425c73b2045af182910c4b81e07f26bd686bb16cae8621d241a4af2a3d3e1578dd4d3c656b205765c48b73e872b01e5f2f0aa4f748774fdc001a5
SSDEEP

1536:HBU4S58O0zJoX5LyiIB+tVGSPcV7R17di4jnPF8ttTRPp+CXTvxVmWB:H8REoXPtVGSUV7RdHjn6tTRPp+CXrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e4d4392b7d6dcc6facd39d9346ca67d

Files

7e4d4392b7d6dcc6facd39d9346ca67d
.exe windows:5 windows x86 arch:x86

f79331c6b43c060485f9f22422ba5fcf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoDosDateTimeToFileTime
CoAddRefServerProcess
CoGetInterfaceAndReleaseStream
OleQueryLinkFromData
OleRegGetUserType
CoGetObjectContext
CoResumeClassObjects
OleLockRunning
CoCreateInstance

kernel32

Sleep
ExitProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
FormatMessageA
lstrcpynA
GetCommandLineA
GetTickCount
GetModuleHandleA
GetLastError
EnumDateFormatsW
CreateSemaphoreW
DeleteCriticalSection

msvcrt

_stat
_vsnwprintf
strtoul
_onexit
_acmdln

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE