7f4009701fb8542ced867365972ccacd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f4009701fb8542ced867365972ccacd
Size

328KB
MD5

7f4009701fb8542ced867365972ccacd
SHA1

e810dd7d0c7269121d20f99ff9ad93464387f7e4
SHA256

1c8392b13773b2eaa1fb93220b87a26d27362f8cf06c8b8e229c8401d2efbda3
SHA512

9aceb7f263dec934fecb3372d33b97c78f60b8b1a00928f986549d5103582ec0aeabbb73ed1d4723479a4e05ce9a33b500e58bf3829583966666818f8f1c03f7
SSDEEP

6144:zxhA/9HVr8Uz2VMu6TqgJourUc2UU0+NfjHwd/3:zzC1xz26ufgJlUc2UH+JjHy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f4009701fb8542ced867365972ccacd

Files

7f4009701fb8542ced867365972ccacd
.exe windows:4 windows x86 arch:x86

ac004a3a266464c2b1f0cac8b6f5c5ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetFileAttributesW
GetCommandLineA
CreateFileA
Sleep
IsDebuggerPresent
VirtualFree
lstrlenA
GetCPInfo
EnterCriticalSection
SetFilePointer
ExitProcess
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA

user32

GetSubMenu
EnableWindow
CallWindowProcA
DispatchMessageA
MessageBoxA
TranslateMessage
EnableMenuItem
RegisterClassA
GetSystemMetrics

msvcrt

_controlfp
_except_handler3
_strcmpi
__set_app_type
__p__fmode
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 320KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE