7ef394e4d783ebd42e6cc9e08752a233 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ef394e4d783ebd42e6cc9e08752a233
Size

181KB
MD5

7ef394e4d783ebd42e6cc9e08752a233
SHA1

330fb62ce1b3670cbe742c2a52168daa4c949ad7
SHA256

db5229522ffe43dedcaa5318e3c6fd1f5b4cd11f106d4a34baa9370a0b987cb3
SHA512

9af13c0c0950e60ab83345f9102c152bead7350fb6d8f66425cff14583b7cddac38aabf4d525a79d8a04c48f0927983a7438e692a7ed4257b7787dcbde948b3e
SSDEEP

3072:2YLI180d6Vj6VITrIrvvPKaEQKWBE3cMfjPQ8yraJou38Rho:2Y0656yT0zvlKWBOcMfgraJL8Re

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ef394e4d783ebd42e6cc9e08752a233

Files

7ef394e4d783ebd42e6cc9e08752a233
.exe windows:4 windows x86 arch:x86

e7522a2b3e3b1304474bdaa0e81d57fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcmpA
lstrlenA
lstrcmpiA
VirtualAlloc
GetLastError
lstrcatA

version

VerFindFileA
VerQueryValueA
GetFileVersionInfoA

comdlg32

GetFileTitleA

shell32

SHGetFileInfoA
SHGetDesktopFolder
SHGetSpecialFolderLocation

gdi32

GetDIBits
SelectPalette

advapi32

RegEnumValueA

user32

CreateMenu
CharNextA
SystemParametersInfoA
TranslateMDISysAccel
TrackPopupMenu
ShowWindow
wsprintfA

Exports

Exports

_Gm

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 918B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ