7ded8bfac32cdb10fbe77844afd24212 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ded8bfac32cdb10fbe77844afd24212
Size

25KB
MD5

7ded8bfac32cdb10fbe77844afd24212
SHA1

16581a6cf7f7807102182243e992c719fce16074
SHA256

4f683a046140745e7d1c34a76cb5da3894d3f8311a598c59057bc81d1b8dac47
SHA512

91a4fa7b89f80b069f2b3c34abc34c8bd8527c386ce08ad47eda858ed17f8c0df43f75684472baf86d5648ee7a3d0e69ddfa22d165966c5636e5c729c807f5b9
SSDEEP

384:MVij7R6vR39tYwO7qiNEc/WiIcwkZ6SCg6AHICf/Vxo3+hUbt98J50hUpiu:nR6vt9tYD7LZWiIV86NwpaXtI0hUV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ded8bfac32cdb10fbe77844afd24212

Files

7ded8bfac32cdb10fbe77844afd24212
.exe windows:4 windows x86 arch:x86

c8f98ff286960a80368ad0e8423e0b52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
lstrlenA
GetSystemDefaultLangID
WaitForMultipleObjects
GetConsoleCP
GetAtomNameA
VirtualProtect
GetModuleHandleA
GetStdHandle
InterlockedExchange
HeapCreate
SetConsoleCP
HeapReAlloc
GetCommandLineA
GetVersion
CompareFileTime
SuspendThread
GlobalUnlock
WaitForSingleObject
LoadLibraryExA
CloseHandle

user32

DialogBoxParamA
InsertMenuA
GetDlgItem
DragObject
SetWindowPos
CreateIcon
GetCursorInfo
DispatchMessageA
FillRect
EnableScrollBar
GetKeyState
SetScrollInfo
IsDialogMessage
SetPropA
DestroyMenu
CreateMenu
DrawCaption
FindWindowA
InvertRect
GetKeyboardLayout

advapi32

RegEnumKeyA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey

version

VerQueryValueA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE