7ffd38d4b463bda6030689d4a699d952 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ffd38d4b463bda6030689d4a699d952
Size

25KB
MD5

7ffd38d4b463bda6030689d4a699d952
SHA1

2dbcae2cc6d0d5bf4290213769efcc2af0dca36a
SHA256

254294def838d779f9fd04d5c1d8d16c307ae64fa7e89d6e2d465b8c042962fa
SHA512

8a693f6cca07e48495b8371d2a84b7692152503a07356bf09dfbb8e45347f7d089a268aaf8e2dcc526719f6631aafdfeae1775d681cceb8f9d418f861a1f8c9b
SSDEEP

768:O6lbEkP8ea8Ont7+NV93rFj6nH9dCtHMvbG:O6bEkPwF+NLrN6TCtIS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ffd38d4b463bda6030689d4a699d952

Files

7ffd38d4b463bda6030689d4a699d952
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE