7e66b15e0e9f1f9abdacb6962e8272b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e66b15e0e9f1f9abdacb6962e8272b6
Size

58KB
MD5

7e66b15e0e9f1f9abdacb6962e8272b6
SHA1

a683ef5ff2b0afd1aa4b3ae24531e0aece1ed5c5
SHA256

20fb16036dfb0d75171884da0e5a4fa2a7f4399d2a92204bfc2bab843823cb07
SHA512

712fe32fb054f98820d02c0526a6e3213665dca7d05fd7e36dafd4c4dfffe291d9ea7949e611a5443e307b34f25f7fd04a6f8e54c7778ed45feb2ce1c32e1f23
SSDEEP

1536:RC8CNrhy2DysugWzFiUMt5e/oMUbTPosdsryg6hAjp7l:RChhy2/dxn5e/oMUbMycyFujhl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e66b15e0e9f1f9abdacb6962e8272b6

Files

7e66b15e0e9f1f9abdacb6962e8272b6
.exe windows:4 windows x86 arch:x86

a95bb815618bc233346807b623526ac3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetStartupInfoA

advapi32

RegOpenKeyExA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
calloc
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ