7d763d645a2a44bd1de6182b7a5db256 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d763d645a2a44bd1de6182b7a5db256
Size

27KB
MD5

7d763d645a2a44bd1de6182b7a5db256
SHA1

3cf8d3010b8b3b1616e46b1af57ee01c3dd841d0
SHA256

5c74651ef82b824d3200324f9b886740818e39348fc34bfef8ed1b0e27ce6150
SHA512

dc0c4aafc2db28a3de2396eb631f931ab2805f6fdb34c48e322da69f5b4535cc6c3411761d7dc1aaad996be4c7abe2137fedfec57154efb87d2773a7112856b0
SSDEEP

768:+mDw8R7VyUmPmIoziuo1bv4oDbuoXl1vz/tX7sy:koBPzlCv4WbugL/tXAy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d763d645a2a44bd1de6182b7a5db256

Files

7d763d645a2a44bd1de6182b7a5db256
.exe windows:4 windows x86 arch:x86

8c774020e11f2865f2420379bfb5e7d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleKeyboardLayoutNameW
WritePrivateProfileStructW
SetDefaultCommConfigA
GetTimeFormatW
QueryDosDeviceW
CopyFileExA
FindFirstChangeNotificationA
FindNextFileA

user32

ChangeDisplaySettingsW
LoadImageA
GrayStringA
RemovePropA
GetTabbedTextExtentA
SetWindowLongA

gdi32

EnumICMProfilesW
GetTextExtentPointA
PolyTextOutA
GetCharWidthFloatA
RemoveFontResourceW
EnumICMProfilesW
GetTextFaceA

Sections

.fasm
Size: 20KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ