8007004788495be5a8e663f44cd6d878 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8007004788495be5a8e663f44cd6d878
Size

12KB
MD5

8007004788495be5a8e663f44cd6d878
SHA1

c7e20a1ddbc420adf95b6bd178664c2cda2842ed
SHA256

e21a554385f58d24c45a4a3521b2ec163fed89418a0835e66f3acd28858180b3
SHA512

0c49d2f5518f96974a64985d3a9e186f220705231c262727de48da131186a0820adaf6ee594a8094699aedcbcde7f4619db8198b7c5218bf802f07603fe4bdd4
SSDEEP

192:C4FhDjZcETG93NTaPAGeTshPZk/8Gxgxou:LhDjZ5G93NWAcpcRGou

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8007004788495be5a8e663f44cd6d878

Files

8007004788495be5a8e663f44cd6d878
.exe windows:4 windows x86 arch:x86

59af9bd86fa1386be73f4381e7e54241

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrRChrA

comdlg32

GetSaveFileNameA

kernel32

CloseHandle
CopyFileA
CreateFileA
ExitProcess
GetFileSize
GetModuleFileNameA
GetModuleHandleA
ReadFile
RtlZeroMemory
SetFilePointer
WriteFile
lstrcpyA
lstrlenA

user32

GetDlgItemTextA
MessageBoxA
EndDialog
DialogBoxParamA
wsprintfA

comctl32

InitCommonControls

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ