807807fba26dcbbac68122f314e0a09d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

807807fba26dcbbac68122f314e0a09d
Size

228KB
MD5

807807fba26dcbbac68122f314e0a09d
SHA1

715d5bc0608e4b581a4358b0d5bb081844c2e83d
SHA256

aaf60f417f4ebcdf7756f0750a3f084ef6a6c0d126b98b34472ac42c196afb6e
SHA512

ec83fb0ed6110a22f4391685fb3564b524be3a6c27437ab9f1d80f098c5dfe61371edf0c1d55f1d7931a7f161fb11e4cbff5279a20e7a0ae5cc863ea327f9647
SSDEEP

6144:7O12vLJZ7tlFreC10L4pQHB+zjHg9yPFM:jvLDXFrHE8HW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
807807fba26dcbbac68122f314e0a09d

Files

807807fba26dcbbac68122f314e0a09d
.exe windows:5 windows x86 arch:x86

5cc0c853b50104085e8063d40f8c1682

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW

user32

CreateWindowExW
DestroyWindow
EnumChildWindows
GetDlgItem
GetWindowThreadProcessId
IsWindow
SendMessageA

comctl32

CreateStatusWindowW
CreateToolbarEx

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ