7f8bd439901aa0f9a0fdd6d1c5e607d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f8bd439901aa0f9a0fdd6d1c5e607d9
Size

83KB
MD5

7f8bd439901aa0f9a0fdd6d1c5e607d9
SHA1

497e7e47390521d2853120e29e97c6dae8bb07fe
SHA256

97ba307c181289c425991338b280086529a3444064ef46e172d80c44a7b052a0
SHA512

18f710ad29bb196dc1346729e7e81c199396424f836079cd5721e98c28e7eaacee1d755088ee6a703fb570a17e2db47f74743b3897e6510df5c539d333f8ba8e
SSDEEP

1536:Dn041xVPjWl4S8alGm1acCwtNh8gj6729OP/jEErxTWDTMqhGKYIZTET8bDQ:D7tjWWS8av9tsgmnjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f8bd439901aa0f9a0fdd6d1c5e607d9

Files

7f8bd439901aa0f9a0fdd6d1c5e607d9
.exe windows:4 windows x86 arch:x86

63b546a06926b2e75d3bbfd2baa43340

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetInformationJobObject
GetAtomNameA
GetCommandLineW
EnumCalendarInfoW
HeapFree
SetCommMask
SetFirmwareEnvironmentVariableA
RemoveLocalAlternateComputerNameA
WritePrivateProfileStructW
FindActCtxSectionGuid

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE