7f7552ec5f22bb36f68e003505de5858 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f7552ec5f22bb36f68e003505de5858
Size

125KB
MD5

7f7552ec5f22bb36f68e003505de5858
SHA1

3e47d645f4bf7e21ac73204d8290dcf11e031b3f
SHA256

e7d0fb64c7191ff4c7c59106edbb9e72193d4095931ab81a9268a558047b937c
SHA512

6c622d7a178909489ecc4647abfc62227a201f0e0bc706f7946019b3d7952de47e2d6863b50744d1a704c453f37f873100579d4b7db274cdd2febb4ed12847d0
SSDEEP

1536:nNXORoC3OROisfEl1DN/jzxIS1g8g70+ZWB2GcZd4T7Ynp76T:2o+ORAq/jz//gd8YnsT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f7552ec5f22bb36f68e003505de5858

Files

7f7552ec5f22bb36f68e003505de5858
.exe windows:4 windows x86 arch:x86

d1b1d470695815e5d2859c5f33b4954e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
FindFirstFileA
FindClose
FindNextFileA
FreeLibrary
HeapFree
ExitProcess
HeapReAlloc
HeapAlloc
Sleep
lstrcpyA
GetProcessHeap
GetProcAddress
LoadLibraryA
GetLastError
lstrcatA
GetModuleHandleA
lstrcmpA
GetModuleFileNameA
GetCommandLineA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ecode
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE