7bb6e40b3b4c94d0ffb71f879bfe2050 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7bb6e40b3b4c94d0ffb71f879bfe2050
Size

6KB
MD5

7bb6e40b3b4c94d0ffb71f879bfe2050
SHA1

3b72c7f40b4e11054e5c4a5910f298749cddfc3a
SHA256

a385cec9852361bb6686718f6ddb9135c94720ea83b9ecf2db7fb484d2606d3b
SHA512

f1daf6b1f6d51ca129446bbad0318cf77aefe1faa20d88f75f35115e08a5b9695c3efc42cc8259f21ba61a7e8af16d5eccf960c7a4d5138ba90d8035a98596c3
SSDEEP

96:Dxp3gmLee2weQtbBR8rqxcGuM3rID9HOGO:xX8rqxcGuGrIDROGO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bb6e40b3b4c94d0ffb71f879bfe2050

Files

7bb6e40b3b4c94d0ffb71f879bfe2050
.exe windows:4 windows x86 arch:x86

2f80ae71a880c774a560e1f4f6a08d6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
ReadFile
CloseHandle
WaitForSingleObject
lstrcatA
GetFileType
WideCharToMultiByte
GetModuleFileNameW
CreateToolhelp32Snapshot
Process32First
ReleaseMutex
SetCurrentDirectoryA
lstrcpyA
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
ExitProcess
GetModuleHandleA
GetCommandLineA
CreateEventA
SetEvent
CreateThread
ExitThread
CreateProcessA
Process32Next

user32

GetWindowLongA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageA
PeekMessageA
CreateWindowExA
CharUpperA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE