7ca05f4b1d3f9c5d13e1dab263ea9549 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ca05f4b1d3f9c5d13e1dab263ea9549
Size

14KB
MD5

7ca05f4b1d3f9c5d13e1dab263ea9549
SHA1

465ce2f67846c3e6a832f1a5764ff7f6d96e22e8
SHA256

6da6e5abe35d439525ee5305aae7701bef0909b3583c4991bb1b3aaf50ded87f
SHA512

8beb0bc2ba5a54635f257daa2f0bc6f662be23f5ef5a7fc25bbd724b5f86e1eb3c52486fa3a82bf7df7e037e54b13e85b5651dea83cc929d03aa59a7b25041cf
SSDEEP

384:mhF+RGd5NzyC8U3MT/ItQookJ0fA/Q6czq:qFNNzBQoD0f2Q6wq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ca05f4b1d3f9c5d13e1dab263ea9549

Files

7ca05f4b1d3f9c5d13e1dab263ea9549
.exe windows:1 windows x86 arch:x86

a85f8952dc33e1e906e9660d9bfba631

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetStringTypeW
GetModuleHandleW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 756B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 371B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE