b7a52d4cec5b08ff2f2d59c9f246a41b | Triage

Sharing

General

Target

b7a52d4cec5b08ff2f2d59c9f246a41b
Size

20KB
MD5

b7a52d4cec5b08ff2f2d59c9f246a41b
SHA1

30808d63c7aa444b1b63281e783132f858aebc45
SHA256

9496dd38ae7350474e7a3422fe5810222b067672a10711ffec560935c5bd0b31
SHA512

4675cd5dbe812019df373913aa381242ebad3e80f4f67bd3c76cf3adde9cf030de727132b24217de685e6043cde899effcda9007650fbdbb5e5a11af48ece071
SSDEEP

384:kLtEGS1Qv6a4G1ZGj6hAYcMpV0zG7vtZTA1+ll03zbf:kLtttKGrG9nGDtZ0clqb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7a52d4cec5b08ff2f2d59c9f246a41b

Files

b7a52d4cec5b08ff2f2d59c9f246a41b
.exe windows:4 windows x86 arch:x86

cb35515161c8411b0c5f86b235aa5bf8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPriorityClass
GetVersionExA
GetEnvironmentStringsW
lstrlenW
WideCharToMultiByte
GetCurrentProcessId
IsValidLocale
FindClose
DeviceIoControl
HeapCreate
SearchPathA
GetThreadContext
GlobalUnlock
GetFileType
FatalAppExitA
GetModuleFileNameA
GetDriveTypeA

msvcrt

fclose
_vsnwprintf

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE