7d3fb8627c9d718bf74e5d9f959b8701 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d3fb8627c9d718bf74e5d9f959b8701
Size

18KB
MD5

7d3fb8627c9d718bf74e5d9f959b8701
SHA1

b1eee10c724f00379eb7595d2875b3fa95ee5d31
SHA256

2f33171a6f4fc56899958b8c6bd5355c5774d7cc0020a761be283576e6eb849d
SHA512

a11467e5f8eda98d252c6f805d47f1d524c67ef996c1536c8d914324d9bfec1db97d5f20537664f8e3c9505642747b8be37d2e215d186d92dd7c9117e358ed30
SSDEEP

384:E5BHo7xX9iGgOa7Pfp+/BRiBZWG5VL3ArCQB1+k7OUXiTPT:Ec7TiGgH7PR8BnKVL3++k7DX+PT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d3fb8627c9d718bf74e5d9f959b8701

Files

7d3fb8627c9d718bf74e5d9f959b8701
.dll windows:4 windows x86 arch:x86

fedfc33dcac1807d8e26bf3a6cf34097

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateThread
SetThreadPriority
CreateThread
GetModuleFileNameA
DisableThreadLibraryCalls
EnterCriticalSection
DeleteCriticalSection
GetSystemDirectoryA
CompareStringW
CreateProcessA
WriteFile
GetTempPathA
GetLocalTime
VirtualAlloc
VirtualFree
DeleteFileA
Sleep
CreateFileA
GetLastError
CloseHandle
LoadLibraryA
DebugBreakProcess
GetProcAddress

user32

GetDC
GetCursor

wininet

InternetReadFile
InternetCloseHandle
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA

gdi32

GetPixel

advapi32

OpenSCManagerA
CloseServiceHandle
ControlService
OpenServiceA
DeleteService

msvcrt

_except_handler3
sprintf
memcpy
strcat
strcpy
strrchr
strlen
memset

Exports

Exports

DriverProc
modMessage
modmCallback

Sections

uyh
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ