b7e0ce0c03deb9b4822859add3f64e44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7e0ce0c03deb9b4822859add3f64e44
Size

132KB
MD5

b7e0ce0c03deb9b4822859add3f64e44
SHA1

70f0da47d9bf43a6417e5d7e455c29dd8261a895
SHA256

ff5e64e08a11cc0e0f61068bb447d79bffa3041dcb27c8da75b9aeb26e043f32
SHA512

edecfd07a4ea1b7894d002b20cc081eca3a29d03b208821635d00c882a800173d9fbe18bd57d9dd3fc7cb1a8007d4e7cb5a05d0042480746faaac8a64f7009f6
SSDEEP

3072:9lqOYKAR2lcrLdYcrxU7QQemmJOSxXfPY:9QYcmUjRmmIw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7e0ce0c03deb9b4822859add3f64e44

Files

b7e0ce0c03deb9b4822859add3f64e44
.exe windows:4 windows x86 arch:x86

272ca023b6ab400389491fe64ccccb78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
CreateHardLinkA
AddAtomA
GetStartupInfoA
SetLocalTime
TerminateJobObject
SetCommMask
_llseek
MoveFileWithProgressA
SetConsoleWindowInfo
CopyFileExW
FileTimeToLocalFileTime
FlushInstructionCache
GetQueuedCompletionStatus
GetProcessHeap
WritePrivateProfileStructW
GetProfileSectionW
ReleaseSemaphore
GetDateFormatA
SetConsoleActiveScreenBuffer
ReadConsoleOutputAttribute
GetStringTypeExW

Sections

.data
Size: 8KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.init
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ