7c51d5810978e16a8f87fcb02971547d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c51d5810978e16a8f87fcb02971547d
Size

67KB
MD5

7c51d5810978e16a8f87fcb02971547d
SHA1

efbb76f27e598eb0b66913518235bce06514f6b8
SHA256

de650c90edf44eae7a3261f25dfd7c87c714d6c3091f01ff9b1a8de9467ef437
SHA512

d255d13b865048edc0ea4457ca22ddb02d608c1fe1fdf744e85d3b6528ce27a49e981577737ef7c88979c63423ae7951394ac83fccadbb43bee81612426f5f5d
SSDEEP

1536:QTyk1hn7jS8U2zADE7fGecYofMGY00EvH+Hq+QOLrpK:/k1hnu2zMWfmLYRHjHpK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c51d5810978e16a8f87fcb02971547d

Files

7c51d5810978e16a8f87fcb02971547d
.exe windows:4 windows x86 arch:x86

6aace25f5535da43a7683df334021c20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomW
EnumUILanguagesA
RegisterConsoleVDM
VirtualUnlock
CreateToolhelp32Snapshot
IsValidLanguageGroup
FindNextVolumeW
ReleaseMutex
GetConsoleSelectionInfo
SleepEx
GlobalFindAtomA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE