7beaeeaa92dc378df92937f629094de0 | Triage

Sharing

General

Target

7beaeeaa92dc378df92937f629094de0
Size

60KB
MD5

7beaeeaa92dc378df92937f629094de0
SHA1

07ca1c508a2ce250fe92f7df0a8a2b854d60f1a9
SHA256

6bcc37ee4f61a8c96735b183de6026ca062d21debb8370781e9543c074219c59
SHA512

2ca37280c6fc0bf291d5cbfb6e63e19e7335a886d742219d2ba1deb2c5451a66aeb7572bf40db19f3d190a69e270f2b1b8b482dfbc844f6a3c969b9173a51e28
SSDEEP

768:fo4+e0pi+qgy1QzTGfmiW2+pUlcVvYjFAly+JnL3Sa/Djnzt0lwOmu:w46GgGQ528UlcVImkcL3SavYwOmu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7beaeeaa92dc378df92937f629094de0

Files

7beaeeaa92dc378df92937f629094de0
.exe windows:4 windows x86 arch:x86

2de711cc410e1c08a8508e229c0d8f60

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
ShellExecuteA

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
_access
_except_handler3
_controlfp
exit
_XcptFilter
_exit
strchr
strlen
strcpy
strcat
fopen
fprintf
fclose
strrchr
memset
sprintf
__p__commode
__set_app_type

kernel32

GetModuleHandleA
GetStartupInfoA
CreateFileA
CloseHandle
GetFileTime
SetFileTime
GetWindowsDirectoryA
DeleteFileA
FindFirstFileA
CopyFileA
FindNextFileA
FindClose
GetModuleFileNameA
GetVersionExA
WinExec
Sleep

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nekuiap
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE