7fb0ad26150d3cb6ae281a56ea874723 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7fb0ad26150d3cb6ae281a56ea874723
Size

340KB
MD5

7fb0ad26150d3cb6ae281a56ea874723
SHA1

73088c9cb1311883b6d8f2cbb7601bee585a226c
SHA256

e4e8fdecd1b1fd4b7356df871fa7f11e4dcee95b69ba9d95a8b8cb33cb533c8b
SHA512

015d6da8d11fe4719e69810480690413aac30979db71ff6c6925fdd801669c9ba093f8a04682a67c9dab9e086e3dc86fb6849d6ee34b38693c198dd6d9fb4bb0
SSDEEP

6144:AD5JqDjgQMdBA4tb4KriugB1CazNPpKL87SQEF0uG136TaU:AD504QMc4amm3tlYh1fSqTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7fb0ad26150d3cb6ae281a56ea874723

Files

7fb0ad26150d3cb6ae281a56ea874723
.exe windows:4 windows x86 arch:x86

d84aa3056e5711ee6b542ce39eb7c59a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
GetCurrentThreadId
ResumeThread
GetCommandLineA
VirtualFree
VirtualLock
VirtualAlloc
OpenSemaphoreA
GetProcAddress
GetModuleHandleA
Sleep
TlsGetValue

user32

InSendMessage
UpdateWindow
LoadCursorA

advapi32

CryptAcquireContextA
CryptGenKey

ole32

CoUninitialize

avifil32

AVIBuildFilterA
AVIStreamBeginStreaming

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 771KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ