ac7b7780fa527958f5b5131fe97d56d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac7b7780fa527958f5b5131fe97d56d8
Size

8KB
MD5

ac7b7780fa527958f5b5131fe97d56d8
SHA1

18ef3aed36d86e4bc5c0c60e767467c0f639bc22
SHA256

92efd617c95c7116ab5801938e6bb27dc481541e4a1219d4fd46fb7cbda5cb79
SHA512

85cd5fefc665b4104cd3a8ddd8d6e946ee7cf1f97b648df834cdfe7b04b53f4443e3fa37c063d3bf0d58477c1c841124ab79fbad3853c37f116864f24ba48319
SSDEEP

48:OEPOlwZbPWpTNkUZfjz0s0BuduvCAMoBvmhXNkekR1nR:nPMwZbPWpTKubtwacZmh9kHfR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac7b7780fa527958f5b5131fe97d56d8

Files

ac7b7780fa527958f5b5131fe97d56d8
.exe windows:1 windows x86 arch:x86

6ff2d2ebd0bde603a915fe162e5280c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CopyFileA
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetTickCount
GetWindowsDirectoryA
ReadFile
SetCurrentDirectoryA
SetFileAttributesA
VirtualAlloc
WaitForSingleObject
WriteFile
WritePrivateProfileStringA
lstrcat
CloseHandle

Sections

CODE
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ