7c783714c35fbd46cb1ceb74f08dc5fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c783714c35fbd46cb1ceb74f08dc5fb
Size

330KB
MD5

7c783714c35fbd46cb1ceb74f08dc5fb
SHA1

d1ca32891c225eaf7f2e320ae068857ba0d018fd
SHA256

264d1333b1e3d7d88b1c99408aaf01df86abe9a6a9e89750449e7959b8660dfb
SHA512

41b4c3a6d7cbda1aa99da354ef56dd6236bac620cd062579f64c8ebf6e117be2e6618d21bc9b2e6b2322a691c71cc32ecb03b503d713acdf7adaa47620cf42e3
SSDEEP

6144:OeQ/g/J/9Qk2vz3HTjNxSSQnwkckcZq9sJPSGHLyM6nCp6SMayVA1:OeQ/g/J/9haTbSbwkHcZq9stSGmesVm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c783714c35fbd46cb1ceb74f08dc5fb

Files

7c783714c35fbd46cb1ceb74f08dc5fb
.exe windows:4 windows x86 arch:x86

de5fb12964aa598f2ada88b70938810e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceTypesW
GetLastError
FindClose
LocalFree
VirtualProtect
GetDiskFreeSpaceExA
IsBadReadPtr
IsBadStringPtrA
GetModuleHandleA
CloseHandle
SetLastError
GetCommandLineA
ResetEvent
GetLogicalDrives
CancelIo
SetLocalTime
Heap32First
TlsGetValue
FreeConsole
LoadLibraryExW

advapi32

CloseEventLog
RegDeleteKeyA
RegEnumValueA
RegQueryValueA
GetFileSecurityW
GetLengthSid
RegCreateKeyExA
LsaFreeMemory
RegEnumKeyExA
FreeSid
IsTokenUntrusted
RegCloseKey
LsaClose
RegCloseKey

hnetcfg

DllRegisterServer
DllGetClassObject
HNetGetSharingServicesPage
HNetFreeSharingServicesPage
HNetDeleteRasConnection

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ