7d9aabd47d2e6253dda74bcb46782007 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d9aabd47d2e6253dda74bcb46782007
Size

190KB
MD5

7d9aabd47d2e6253dda74bcb46782007
SHA1

c1914bf80e9fcff154672254f5c1ca3ce116f869
SHA256

b7bfa0f8e1932f83a746d0f7db131460ccd92b8a0c248d8d3bc0894bf015c39d
SHA512

e802598191365c28be0f94e2aff2cae2e715cd372f8b057115af630240286c0832f4cb7c834b306e0c501b66252eb7e44862ea8f1731c5ad36401c27be52100d
SSDEEP

3072:RQB8suc71BmDUkbjNH5BNeNU9Fo5Fk27aLA099tLQLUpNN:GucXWnFHcNC23k2/E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d9aabd47d2e6253dda74bcb46782007

Files

7d9aabd47d2e6253dda74bcb46782007
.exe windows:4 windows x86 arch:x86

5caf331afa50f2a3dfd03781dd0a570b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetLastError
SetCommState
WriteConsoleA
GetLogicalDriveStringsA
SetStdHandle
RtlMoveMemory
GetFileAttributesExA
FormatMessageW

user32

SetPropA
SetWindowStationUser

shell32

SHEmptyRecycleBinW
SHGetSettings
DragQueryFileW
DragFinish
SHBindToParent
PrintersGetCommand_RunDLLW

Sections

.code
Size: 9KB - Virtual size: 811KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE