7d153e9236ef25bdf35db4031e208ee2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d153e9236ef25bdf35db4031e208ee2
Size

356KB
MD5

7d153e9236ef25bdf35db4031e208ee2
SHA1

75e0df5237b2401e280b281020c7f9f9be38709e
SHA256

76bd82b76f7b84bc9e5ab607258903179397878fff5290c2d12856a00abc9c38
SHA512

86260c0c699b6091e845be38b4f6aa63a9aa98c774d795f3d47c312fe4aa188131727b10112576b27673fbb1ad27227419b4389def7a577fd097192d63ead578
SSDEEP

6144:3QBNIN/lCgxjyZJhmsAA5p+dtZd5KjII3TQa+LelJ4bncvWWBhDaKmGF2+5sd:h/lFIZvABtZd5Kjrjz+SUbEW29a5qsd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d153e9236ef25bdf35db4031e208ee2

Files

7d153e9236ef25bdf35db4031e208ee2
.exe windows:6 windows x86 arch:x86

27245a4e04fd9b54e7bedc449b65f243

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
ExitProcess
GetCurrentProcess
CreateFileA
CloseHandle
LCMapStringA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegDeleteValueA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegQueryValueA
RegEnumValueA
RegSetValueA
RegCloseKey
RegDeleteKeyA

Sections

.text
Size: 262KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ