7f3d744bd26fa60c6a22a13d4369a787 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f3d744bd26fa60c6a22a13d4369a787
Size

148KB
MD5

7f3d744bd26fa60c6a22a13d4369a787
SHA1

c9cf19d0e87fc700e2ce9c77ae285d8e6d67814b
SHA256

6be571e693d5c6372c4b59e5449e601617df7283ad2abbe080445eb299b23b96
SHA512

01a1ef8094556b757a5ce6005ac21b2409323fac801dc64df1e5fb76f6e65d89df6bb7fefacb3394ee1099e4abb5a58276a68e9b42b39134e7e5738e677e7640
SSDEEP

1536:4viwQ1MLrzENwvtbRbGnnAb+uOdXM1pVFQ9NA0zmIma59umHWxqlhs45iY4ar2Qg:4vYKLUGSAbUdTmazum2cZR4ujGVIScQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f3d744bd26fa60c6a22a13d4369a787

Files

7f3d744bd26fa60c6a22a13d4369a787
.exe windows:4 windows x86 arch:x86

b3b921b5736cd704d18367980fffbb9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateCompatibleDC
SelectPalette
GetStockObject
SetMapMode
SetStretchBltMode
SetBkMode
SaveDC
Rectangle

kernel32

GetWindowsDirectoryA
QueryPerformanceCounter
IsDebuggerPresent
lstrlenA
GetStartupInfoA
VirtualAlloc
VirtualFree

user32

ShowWindow
DispatchMessageA
TranslateMessage
GetParent
CharNextA
GetDC

glu32

gluTessCallback

comctl32

InitCommonControls

Sections

.text
Size: 1024B - Virtual size: 875B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Ypivspfg
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE