b7cf1643b86b9c95e48b635839c0c3af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7cf1643b86b9c95e48b635839c0c3af
Size

41KB
MD5

b7cf1643b86b9c95e48b635839c0c3af
SHA1

0bce4e1a664b34e79c2477c0f26bbd364398009d
SHA256

d92e684082c5470d0cdf96d20a64415386501706ccfb9e68d539c82271fc0915
SHA512

08da1762856a2695060cca9cbbd109427854ab4dc7dd3f5fd565ee9df62ff966fa6d209bcc88bc849d4ecb0aa133781a46067a1502c6d1997a79735809631510
SSDEEP

768:1OIVuLvQ1WCjIGBdeKut7EIHTiTN8xxbjMCPs85ivtcxlJ2Ff:1OIV4o30F7EhN8bjDs85ialU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7cf1643b86b9c95e48b635839c0c3af

Files

b7cf1643b86b9c95e48b635839c0c3af
.exe windows:5 windows x86 arch:x86

0c7ce3a2772f3477bf1c1d618ac5832f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextVolumeMountPointA
GetLastError

user32

DeleteMenu

Sections

.text
Size: 23KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rfdxtd
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE