b7a956127785e2df50ee02e0900553ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7a956127785e2df50ee02e0900553ae
Size

20KB
MD5

b7a956127785e2df50ee02e0900553ae
SHA1

c5a2a40d8275bb130bd5b4d523c08ea9afc6e357
SHA256

64b9b4ccb30c447b103e6f5ed03b1e26a14b58b23e90e2751c7df39ca9ba8193
SHA512

4bc23ab21814c136be197e6989fba10b5302d27ed06f7dfb309596ea3116695dfec1c8fe6c0366356737a3095a13094453f814114d4fe44ddc0b03c85a1c0889
SSDEEP

384:DIBGzeM05pCM7Tcmuwscjkt99YL0moVfH38eWFM5LTBQZYRQXi6UBaa4HkxX:Dlj0xTXj09mL0vPHTaZYRQXzyapkd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7a956127785e2df50ee02e0900553ae

Files

b7a956127785e2df50ee02e0900553ae
.dll windows:4 windows x86 arch:x86

a15274e1f166aaad3fbf3a4819c5968e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
WinExec

user32

SendMessageA
MoveWindow
FindWindowA
UpdateWindow

Exports

Exports

ServiceMain
TStartUp

Sections

Size: 15KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE