7ff52bd7cdfaa0e4aad85f0c0c4fbbaa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ff52bd7cdfaa0e4aad85f0c0c4fbbaa
Size

132KB
MD5

7ff52bd7cdfaa0e4aad85f0c0c4fbbaa
SHA1

da36f29d55878392ba13c1890537514485916c21
SHA256

316f57d11e9f6578acee8f01382fe62206bd5bc564249d6a94d0ef2b4c40ee95
SHA512

cda57c5a64c91dd1db1a351ab986e00f1138784edbe96c596ff8b1ad5d40aaf0e826a4b41bd5ed63cf69544d41b9ca9d731ddfe0289d6e6147310e286a30e262
SSDEEP

3072:xIuZCNP+MN0+cD5NUFjE/F5LDAsEQKdVfnsUHOLnPfi:eLNP5RkzSC3Al1dVfnpuzf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ff52bd7cdfaa0e4aad85f0c0c4fbbaa

Files

7ff52bd7cdfaa0e4aad85f0c0c4fbbaa
.exe windows:4 windows x86 arch:x86

664ddff6f090292612f859517a2c37a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsA
GetMailslotInfo
GetDateFormatA
GetConsoleCommandHistoryA
HeapValidate
GetAtomNameA
TlsGetValue
FileTimeToLocalFileTime
CreateTimerQueue
GetVersionExA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

itext
Size: 8KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ