7c999b0454fb4a796f0b6dd46a9a80db | Triage

Sharing

General

Target

7c999b0454fb4a796f0b6dd46a9a80db
Size

315KB
MD5

7c999b0454fb4a796f0b6dd46a9a80db
SHA1

a5f872e3119dd1a61816247108161d857238a2e4
SHA256

1839f180ba13a02f278c8d4285950fa0fabc49a4ae267d8ccf037477508e97ec
SHA512

e1a823a942a53977b9c46ee7e0166a0d17718bfa54e8d35adb119ad7595c5bd5be9f1e373f6432790016e77b9498fe48b7250fd8c67e4954852c9d13d2816f75
SSDEEP

3072:uXDXL0Bvnj+QF6WiGLjTDJzyWdt3o6VHMap3j8PZ9wi9kPnfI3ZYb:uXDXL0BvnjbJDB7VHMkzQB9qnACb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c999b0454fb4a796f0b6dd46a9a80db

Files

7c999b0454fb4a796f0b6dd46a9a80db
.exe windows:4 windows x86 arch:x86

f0c81b6f8530eba9d7b8894954822d1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

shell32

Shell_NotifyIconA

Sections

.text
Size: 150KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE