7cfaf4653d480e3e7102c19497fcb3c835dd4aea055a536e4848b9af1c4de2dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7cfaf4653d480e3e7102c19497fcb3c835dd4aea055a536e4848b9af1c4de2dc
Size

6KB
MD5

aee6d349c425ab68a54378837c617fd2
SHA1

92de7d04a33eb2c6f6c363eddc1355bf86d593e7
SHA256

7cfaf4653d480e3e7102c19497fcb3c835dd4aea055a536e4848b9af1c4de2dc
SHA512

4b7ac1ad88c96c01fe66c9da8c894000339572da0b464bfea3f07728d6a0373e77882394d0e7b33f48eb25a93cbe4fe74ef04afc7b1a0419dc3ed9169842cc41
SSDEEP

48:SFbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uXO:g0mIGnFc/38+N4ZHJWSY9FI5Wq4x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7cfaf4653d480e3e7102c19497fcb3c835dd4aea055a536e4848b9af1c4de2dc

Files

7cfaf4653d480e3e7102c19497fcb3c835dd4aea055a536e4848b9af1c4de2dc
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ