7c528f32d5029b6b088e3cf7a0074778 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c528f32d5029b6b088e3cf7a0074778
Size

260KB
MD5

7c528f32d5029b6b088e3cf7a0074778
SHA1

72601057e6d311a852c2231f544817792028471d
SHA256

d81f495589b8ffe202fc0577cfea4659aabc6befc9d212a89fb23533b0ab7314
SHA512

1f387a98d1e25cd5645a74cd5b4faa492438d0fbfc4cdab7d8071d5df7a0c715a779b76d0bd9a92e959a958fd954bc1cc10d360d6ae7adc408cec8c316c9fa63
SSDEEP

6144:24mH9RuQ8h6VrT8B/KIP2RveUXCwAo0n4EwwXLoyS8TJ:2BHPPTOKIeGlo04XCfJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c528f32d5029b6b088e3cf7a0074778

Files

7c528f32d5029b6b088e3cf7a0074778
.exe windows:4 windows x86 arch:x86

4930d6d93f163a2cf8c6b32e5898c7b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

advapi32

CryptCreateHash
CryptGetHashParam
CryptReleaseContext
DuplicateTokenEx
RegCloseKey
RegDeleteValueA
RegQueryValueExA

kernel32

InitializeCriticalSection

shlwapi

PathFindFileNameW
SHDeleteKeyA
StrCmpNIA
StrStrW
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

ExitWindowsEx
GetIconInfo
GetKeyState
GetMessageA
GetWindowTextA
OpenWindowStationA

Sections

.wbat
Size: 43KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qxop
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bqbsz
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ