7f68e0ed803aa33bc074b147d027017d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f68e0ed803aa33bc074b147d027017d
Size

774KB
MD5

7f68e0ed803aa33bc074b147d027017d
SHA1

e05984e4df8e2318a5b1e4cba3e7d7c4109a77aa
SHA256

ea7b927089b3ce2ed54bde1b0eaff1b3c134a6586e4a4b169a6da141451fa11d
SHA512

2aeae6c73e6064edcb7679737291f3bc447ce67811744aacc8aaf9320e8b7c1694a6c100f42a842b7afea084a1cc7ce0fe71fd02a8e543ad472f901473b4a222
SSDEEP

12288:pqKc06gl3effJCgoyBnnhq7OOgEbBjfyDtFP9FuzxXAB2yMkU:pfHSJFBnhqjDNXAB2yHU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f68e0ed803aa33bc074b147d027017d

Files

7f68e0ed803aa33bc074b147d027017d
.exe windows:5 windows x86 arch:x86

5f2df7257758bf2707e2911007001ebd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount

user32

GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dyamarC
Size: 628KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dyamarD
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ