7c9a42678daeed403e3405d82979136f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c9a42678daeed403e3405d82979136f
Size

74KB
MD5

7c9a42678daeed403e3405d82979136f
SHA1

1811b03722c35062aa532062ae041c5aa34721ae
SHA256

73ebe635b7e56aa849739d9d256253114868209b07812f590995ec5e165d9fbe
SHA512

8e07ef40a0e5f0f918c786f7b9d05d091e839e64505d52c5544fbb6c85bb9fd31a84415bd5a54645f2624227c40997c3a5c5efb53ad15ec92212913a2843c21b
SSDEEP

1536:IeIBGlaHF9mnUpMwHnD9lAgmpRUzJs3N0zd5eL5NO1b0kwe+67l:ycQmnUppnDfAgwRWsy007l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c9a42678daeed403e3405d82979136f

Files

7c9a42678daeed403e3405d82979136f
.exe windows:4 windows x86 arch:x86

595c114b1035fef11301079d1095844e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalAppExitW
BackupRead
CreateHardLinkW
GetStartupInfoW
GetNumberFormatA
MoveFileA
OpenProfileUserMapping
TlsAlloc
CreateEventW
RtlZeroMemory
BuildCommDCBAndTimeoutsA
IsBadStringPtrW
SetThreadPriorityBoost
CreateWaitableTimerA
SetCalendarInfoA
EnumDateFormatsA
FillConsoleOutputCharacterW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ