7fe3c241a2a40af389c91f4f7109c764 | Triage

Sharing

General

Target

7fe3c241a2a40af389c91f4f7109c764
Size

8KB
MD5

7fe3c241a2a40af389c91f4f7109c764
SHA1

add0f0ed4fe5a757e37598c7e6f471274e8e28fa
SHA256

4fde635348e59510bae303ecdcf457751d1c31f0fc62a1659403d8c5c1adbfd9
SHA512

372870f6b6edda5c346b0c580d1a9c3aa5c8a9f329d07e863f74d5d033c1309632999fd1361a7ce7df500c3bb601f955aaf643ba82dc309944eec394929c4918
SSDEEP

96:ugiQuU5UeT4weDuzXzoQ65iP4WyFOGmeAZlCtvE:uzUdT4zWjoha4WxBLac

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7fe3c241a2a40af389c91f4f7109c764

Files

7fe3c241a2a40af389c91f4f7109c764
.exe windows:5 windows x86 arch:x86

e71c1632e0c3c318ce204a70daaf5ac7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
LocalAlloc
LocalFree
CreateFileA
GetFileSize
lstrlenA
WriteFile
GetProcAddress
LoadLibraryExA
CloseHandle
ExitProcess
GetComputerNameA
MoveFileExA
GetCurrentProcess
Sleep
CreateEventA
TerminateProcess
GetSystemDirectoryA
lstrcatA
lstrlenW
LoadLibraryA
OpenEventA
GetModuleFileNameA
lstrcatW
lstrcpyA

shlwapi

StrToIntA

imagehlp

CheckSumMappedFile

ole32

CLSIDFromString
StringFromCLSID

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ