7bbb45f9b4958ced2a229e80aec4b1c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7bbb45f9b4958ced2a229e80aec4b1c5
Size

51KB
MD5

7bbb45f9b4958ced2a229e80aec4b1c5
SHA1

6d68f67332692abdd4f600e5590643482629735e
SHA256

73fb0d620e47018bbec88ec271289bd4201777ee92cec8dce33640aa8abb03a4
SHA512

5942862c9beca84b20945ec98ad31707a885585f8927f9fc8e4f5eb3990648e803b75687964e17d5d5348af443d2885c9905bc7b2a9dcffefb849eec31eaa947
SSDEEP

768:iDRQOTyx8YrmP4n3WSCTt1anyevjkpGKxOkwQl:sRLTyx8imP4n3BCDGXbkEKgkww

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bbb45f9b4958ced2a229e80aec4b1c5

Files

7bbb45f9b4958ced2a229e80aec4b1c5
.exe windows:4 windows x86 arch:x86

1900879c98b4a96d399d6ce626330c68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

CODE
Size: 16KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE