7f05df3b17e93bf30cefac8b043d998e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f05df3b17e93bf30cefac8b043d998e
Size

76KB
MD5

7f05df3b17e93bf30cefac8b043d998e
SHA1

49feb04f3865156ffd32058f9c260b34d77e7121
SHA256

08df469f23dce482e1d448ca70502b96a309590edcaaaefb578a449c57e5d2fb
SHA512

490119c83fbbb7edf26cf587857b3cca2159df7583d28d4a0f627cfce0b521125d4f1c383c12cde996816e87150c2a9728895c5eaa2fc232363d53ca6cba2297
SSDEEP

1536:MUW/evcK9J+aegqZSHFdwBiB32l7rBxHfFtjEErxTWDTMqhGKYIZTET8x:3aevcnfjMHFaY3gndtjBkMqhGKZTbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f05df3b17e93bf30cefac8b043d998e

Files

7f05df3b17e93bf30cefac8b043d998e
.exe windows:4 windows x86 arch:x86

3c0d1d1247633e2361de114663730ba0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleExA
HeapCreateTagsW
lstrcmpiA
GetStdHandle
DebugActiveProcessStop
SetCommConfig
GetConsoleTitleA
GetProcAddress
LZDone
GetPrivateProfileSectionNamesW
QueryPerformanceCounter

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE