7da9735d078ddb2ad132ad75de621ced | Triage

Sharing

General

Target

7da9735d078ddb2ad132ad75de621ced
Size

56KB
MD5

7da9735d078ddb2ad132ad75de621ced
SHA1

258d7b13e4a8dbd2c46e9e6a089aeabf2c49425a
SHA256

7dc4dbc5eab37ae7357b816921cc1615f4059b8885746f7da3e10cdb941a939d
SHA512

2ccf2047454a87e3a7210611e2706774a53b11a3cb93378073a300c2d967d0643bcadc646869a6456934b51cc20e9560c7532b46359cb5ea4dc1e9af57dadc2c
SSDEEP

1536:XMuQ8m/OLEMD4bTPE5EMskSDW7Ldi8XJkbk600URM:XHQ8m/OLBD4bTPEGl9e5i8Zuk4cM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7da9735d078ddb2ad132ad75de621ced

Files

7da9735d078ddb2ad132ad75de621ced
.exe windows:5 windows x86 arch:x86

2d1ec0dce46851404a92a347fa9370be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

advapi32

CryptAcquireContextW
CryptDestroyHash
CryptHashData
GetUserNameW
RegCreateKeyExA
RegEnumKeyExA
RegSetValueExA

shlwapi

PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
StrCmpNIA
wnsprintfA
wvnsprintfA
wvnsprintfW

user32

CloseWindowStation
ExitWindowsEx
GetCursorPos
GetDlgItem
GetForegroundWindow
GetIconInfo
GetMenuItemID
MsgWaitForMultipleObjects

Sections

.zav
Size: 46KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jwb
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pub
Size: 6KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ