7d2fae9038c0fa1f43917f7252e4375d | Triage

Sharing

General

Target

7d2fae9038c0fa1f43917f7252e4375d
Size

517KB
MD5

7d2fae9038c0fa1f43917f7252e4375d
SHA1

9c0e90a364b83fa6a24cae2e5a40ff26c356a057
SHA256

5d10d5d48efb2053e3a3344edb4fb2e3d4a4cd8b2a5a69a0722614a53bb16ddb
SHA512

bc6a989c5a6abb5ea29205f8b30311b64a3e2c219d55a545edcbd89ba000d3e6d35e0e38b28a413fb47303a5afcd0769c64a0c99813fe46a53aea87c5adb19a4
SSDEEP

12288:1NAG20haJz6quE9DowBicybYNSQ/ipq3YRpYdSgIYR5BtPMHc90hX:rJ2ZJ2quuBicybYzcq3Y+5BtPM8m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d2fae9038c0fa1f43917f7252e4375d

Files

7d2fae9038c0fa1f43917f7252e4375d
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

286f30a43e11ff1640f00d168d7dc35f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapReAlloc
GetCurrentThreadId
GetEnvironmentStrings
FindFirstFileW
WaitForSingleObject
WriteFile
VirtualProtect
InterlockedExchange
GetConsoleCP
LoadLibraryW
WriteConsoleA
LCMapStringW
EnterCriticalSection
GetStdHandle
TerminateProcess
GetOEMCP
HeapAlloc
ExitProcess
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ