7eeb4748e743c9fb9286137cb8ccaf27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7eeb4748e743c9fb9286137cb8ccaf27
Size

124KB
MD5

7eeb4748e743c9fb9286137cb8ccaf27
SHA1

7da0c3f7a2b84dca52379496a2c1f81985c0cf88
SHA256

7ea8664c5571750519efefa6624f9fba31ceaded9d439c36c182f831b40a980e
SHA512

9a79fdae795880b142fd4f21dc69fc46c2467200bb38fe950ef27dfc3f4bb302d9a27e1cf1fffbf382294de51d07c74dfc8cf4d34dea5511c687bbfc402938fd
SSDEEP

3072:b9cskD4bnH0LpwlRrk02tTBfU54DFWvk+:yDvNeRrQtTBGt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7eeb4748e743c9fb9286137cb8ccaf27

Files

7eeb4748e743c9fb9286137cb8ccaf27
.exe windows:4 windows x86 arch:x86

3ece6c14dcc48435c927f4ac6a88c827

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
GetStringTypeA
VirtualAlloc
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
LCMapStringW
VirtualFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

RegisterClassExA
CreateWindowExA
DefWindowProcA
PostQuitMessage
MessageBoxA
LoadImageA

gdi32

GetStockObject

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ