7ec447f2d150293d334fd083ea24a44a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ec447f2d150293d334fd083ea24a44a
Size

76KB
MD5

7ec447f2d150293d334fd083ea24a44a
SHA1

d24aea79f1bf3c0b10dc5cf216c83ff15abffd13
SHA256

e013413be77c41308e730cfc672ce90df6158780a0046152355aa55b1d44ad62
SHA512

8c2856f1c0c32ff16c535de4811177cde5182431e14e68ebe9251eac27e3f2103ecc77b95726732a35bfcb68a1ae22d3b8b1c0a9dc21614337c4a9160721eba3
SSDEEP

1536:zio5jJEHcDcfOaqEOTa39ixCZeyHnHZSnNRGFW2t0lMGleQW6y+V:zPE8ofPTi4eyHnHaUo2tz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ec447f2d150293d334fd083ea24a44a

Files

7ec447f2d150293d334fd083ea24a44a
.exe windows:4 windows x86 arch:x86

661a463beff3b041f84ff5960c80e0b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

user32

DrawTextExA

gdi32

AddFontResourceA

comdlg32

GetSaveFileNameA

advapi32

RegQueryValueExA

shell32

ShellExecuteA

ole32

CoCreateInstance

comctl32

ord17

Sections

pec1
Size: 22KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE