7d731e567f0b2b605779079ed6f5a9dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d731e567f0b2b605779079ed6f5a9dd
Size

113KB
MD5

7d731e567f0b2b605779079ed6f5a9dd
SHA1

fe36e51feeaae3be364f936f50a785ea146b6078
SHA256

7aa305bc58a361a590794314b1331cbc2bd27837e3057c6a10c78e491e883f3b
SHA512

1762b3e22bb749c86e0753d5c551a81cc3dc1f21f1f0cc2c5b59ae6ac37d37ca5b324e977cf3f97adbcac250b0d495eca6d35d2168da11e38739d9f13c0da585
SSDEEP

3072:rWN6sqf9OCNIbD6+QbksqAQkA0XQ3Xictp:Yk1d+etbkxd2Ef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d731e567f0b2b605779079ed6f5a9dd

Files

7d731e567f0b2b605779079ed6f5a9dd
.exe windows:4 windows x86 arch:x86

df33737e5faf70370b32e169c5855a10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
CreateFileW
CloseHandle
GetProcessHeap
GetModuleHandleA
UnmapViewOfFile
GlobalFree
lstrcpyA
GetEnvironmentVariableA
TlsGetValue
GlobalUnlock
CreateMutexA
GetCurrentThreadId
HeapCreate
SetLastError
FindResourceW
lstrlenW
GetStdHandle
GetExitCodeProcess
LoadLibraryExA

user32

GetDC
IsWindow
CreateWindowExA
FillRect
SetFocus
DrawMenuBar
CreateMenu
GetCaretPos
DrawEdge
GetDlgItem
CallWindowProcA
DispatchMessageA
CheckRadioButton

rsaenh

CPSignHash
CPHashData
CPDecrypt
CPDeriveKey
CPGenKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tqhsbtb
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE