7e4f5b6f58980efe724644b01b91d1af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e4f5b6f58980efe724644b01b91d1af
Size

32KB
MD5

7e4f5b6f58980efe724644b01b91d1af
SHA1

3f5dab27e9c2dd4fe889f215f71ba21f5420ea79
SHA256

bbe564214ac83d70c97ddd5e7e97d3873cdad45ec474de9695ec450f7387cfbc
SHA512

a87acd996ed46013ed0332446889d97ae6155d00956c6a90fa75b4139ff2e94a7d20f9f7648b4d3d0d9224675d3fe172ba8dda758def5b41a853401a09a25a77
SSDEEP

768:6P29Mplbs0Oe9rXubi67+kNx1Kg7ZNgjOj9O+oC8I:V9Mrbs/Wrebi6Z1KQDgjOj9O+/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e4f5b6f58980efe724644b01b91d1af

Files

7e4f5b6f58980efe724644b01b91d1af
.exe windows:4 windows x86 arch:x86

01cc34abbfbbfc4868ff2a3216c2da8b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyCursor
DefDlgProcA
VkKeyScanW
CreateDesktopA
EqualRect
MessageBoxA
EnableWindow
IMPSetIMEW

kernel32

GetLastError
VirtualProtect
ReadFile
RegisterConsoleOS2
GetOverlappedResult
RegisterConsoleIME
CreateConsoleScreenBuffer
SetCurrentDirectoryA
PrivCopyFileExW

gdi32

SetWindowExtEx
EngDeletePath
GetTextExtentPoint32A
GetWindowOrgEx
StartPage
FillRgn

comdlg32

PrintDlgW
LoadAlterBitmap
dwOKSubclass
ReplaceTextW
WantArrows

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE