b7ba1a8dc1d5bf883c4b3efce6f15d68 | Triage

Sharing

General

Target

b7ba1a8dc1d5bf883c4b3efce6f15d68
Size

153KB
MD5

b7ba1a8dc1d5bf883c4b3efce6f15d68
SHA1

a1e45eae1edf814c5255e3a6b61d3907b79714f9
SHA256

5a1bb016ae7fc2af89399c668a5a26b5d19315b1a5244f797d45ea5626e19c84
SHA512

8ec4c6d5c1c5882e8dd83a4a08910d436f2214ac78b2f81af850fe8a9ad137ca53bdc55b2abe5dae68ebaac6aefcc3c60f23b899096bbaac63f4b1c20586884b
SSDEEP

3072:kOOCiAqW84BFhW9rvaez9FjtpjaSv0P8LpEOK0sW3zR:irW8UW9ndY8LptXsMR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7ba1a8dc1d5bf883c4b3efce6f15d68

Files

b7ba1a8dc1d5bf883c4b3efce6f15d68
.exe windows:4 windows x86 arch:x86

62b28a28cdb8b00a787e93828984256b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_onexit
__dllonexit
calloc
exit
memcpy
_itoa
??2@YAPAXI@Z
_strdup
??3@YAXPAX@Z
free
__p__commode

kernel32

GetTempPathA
GetModuleHandleA
GetModuleFileNameA
CreateFileA
SetFilePointer
CloseHandle
GetTempFileNameA
FreeLibrary
DeleteFileA
WriteFile
ReadFile
LoadLibraryA
GetProcAddress
GetStartupInfoA

user32

MessageBoxA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ