7fc0ba560760286fcc3d036d436414c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7fc0ba560760286fcc3d036d436414c3
Size

77KB
MD5

7fc0ba560760286fcc3d036d436414c3
SHA1

52ff78fcf251900aa8a365b7d19d25d6decdf6a7
SHA256

e51ec6bb8df22f9c713c70fc3edd74faef5781ac5de357fb7af23d7224ed7332
SHA512

1231477cc5b4639386f2bc31b7da0b813d0a5463f8bd57a0bf82cf372522fc6d9a5831a2e7ff16c66e02827158028b31e9c05310e48a667f6bf79a003e2e8173
SSDEEP

1536:ZZ7WIH/B5sLqX92NHOt5BMLgqZntVz5v0++N2Ch7aKuFYs834z6KpgfO12:ZwO/Bsa92pOt7McEntVFvAkChWKuFYsN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7fc0ba560760286fcc3d036d436414c3

Files

7fc0ba560760286fcc3d036d436414c3
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE