7bb20f0bc9e61d857944564078c16f2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7bb20f0bc9e61d857944564078c16f2c
Size

196KB
MD5

7bb20f0bc9e61d857944564078c16f2c
SHA1

22d194bdeb957a99209502d4078368f8947897ce
SHA256

c255497128fa7aee4d3d0a81295ae905489857621c588914ad8cb296f67caae3
SHA512

081f6892e21b47695c1ee9920bb58f54e914f404813025885e75bf05347ace251338391eefc65b11c6f4e8bcdbb1df0ad0d89f74d67ef7dae5ef4292ad0174b1
SSDEEP

3072:GVmHcLY0bOVB/S9AJJjWm/73gAZdujVvPdwiWoQmAPSL0RFR0Yu7J:g1bOVVdJh//73TEhPdXAPSGn0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bb20f0bc9e61d857944564078c16f2c

Files

7bb20f0bc9e61d857944564078c16f2c
.exe windows:4 windows x86 arch:x86

fe1e6c576acc1b15c6ff53296e69202d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
IsBadReadPtr
GetProcAddress
GetOEMCP
GetCommandLineW
ExitProcess
GetACP
VirtualAllocEx
GetModuleHandleA
LoadLibraryExA
GetModuleHandleW
IsBadHugeReadPtr
GetCommandLineA

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ