b7b151a35cc1ef19d0ac332fe9c7442e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7b151a35cc1ef19d0ac332fe9c7442e
Size

789KB
MD5

b7b151a35cc1ef19d0ac332fe9c7442e
SHA1

ef73855600707d63a36f3076c90198ab5d91bfc4
SHA256

a7efbbb147e36d92fd58aaa094daa9c1bd374a101a9d4c9f742079f90d10b8b6
SHA512

366956b3fb3cd34b0f7002d33ae3365c1b65bbb78e42684d684c8960e765c27bf00c016fec76d4bbd4bc41b1548be87355837e54556c8192ba69d9292be89ffc
SSDEEP

24576:rW7hTkLBeFNS3Z8gcwPTzQm9Pkd4NQR1MLO:rW7hoFeFNSJFcwP/jPls1oO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7b151a35cc1ef19d0ac332fe9c7442e

Files

b7b151a35cc1ef19d0ac332fe9c7442e
.exe windows:4 windows x86 arch:x86

4bac1795350ad25242cd9192c9a7b621

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
Sleep
LoadLibraryA
GetModuleFileNameA
ExitProcess
GetTickCount
GetCurrentThreadId
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetStringTypeW

user32

PostThreadMessageA
GetMessageA
GetInputState

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 740KB - Virtual size: 739KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ