7d041e9fc3b011856ff240c2ee5649ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d041e9fc3b011856ff240c2ee5649ae
Size

690KB
MD5

7d041e9fc3b011856ff240c2ee5649ae
SHA1

a5fb5ce6f3151bc0dc1a536349e21bac8f5392e5
SHA256

e4187e8a2404a8fd05f1081b87058ab907587defd57ba3a870b650d2d73adac7
SHA512

fe9160ee4b4708f18fc4e2e819f04bb4bf1e258d0cbff10c45594a36e84bf127bd023f0e8a2a8081f41637b35fb78e2d6cce66aca9f9eacd2c773700484f458a
SSDEEP

12288:CmEfVPe3o+pXdQdPXztt2MFIKdm/x80rnnwSDaK1NyaKHuOlWxhZxQb+Glx:8e4+Nd+PHVkPjnzJ2NO+WxzTg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d041e9fc3b011856ff240c2ee5649ae

Files

7d041e9fc3b011856ff240c2ee5649ae
.exe windows:5 windows x86 arch:x86

7718c6d3111e5d9a637f76d2520a71b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

DefWindowProcW

advapi32

RegCloseKey

comctl32

ImageList_Draw

Sections

Size: - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE