b7d0b3622dc8939be43bdd7027941c7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7d0b3622dc8939be43bdd7027941c7c
Size

199KB
MD5

b7d0b3622dc8939be43bdd7027941c7c
SHA1

2994a7af290a0fc4e039acef5bdf8d6fe5c00ecb
SHA256

5a3e813185ac59f868c04b2c5a4e0ab20118ae9b0ee9fa1208982c93f6d6c47e
SHA512

2121e4495bd308c86fec383594bd135981d03f785b9fa2ba5acbbe3c9436af727fc657ae9c1e3b2e8a2c83b61dde278fb68f41a8296ce3d74560ceb326a4189b
SSDEEP

3072:Wk+Hn2oM3TUULfoAGrLGBgNGGoJKG7ERRbuemXhJGTr5cxXgjW:+nhM3BoHpoGoJKzRg1EcxQK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7d0b3622dc8939be43bdd7027941c7c

Files

b7d0b3622dc8939be43bdd7027941c7c
.exe windows:5 windows x86 arch:x86

80045320a22dd5f1f48796682d7e52ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
lstrlenA
HeapCreate
GetFileAttributesA
FindVolumeClose
CreateDirectoryA
GetProcessHeap
IsBadReadPtr
GetModuleFileNameA
FindVolumeClose
VirtualQuery
GetFileType
CreateSemaphoreA
GetDriveTypeA
WriteFile
ExitThread
GetCurrentDirectoryW
HeapFree
WaitForMultipleObjects
GetFileTime
GetCommandLineA
FindClose
GetModuleHandleA
CancelIo
LocalSize

uxtheme

GetWindowTheme
GetThemeTextExtent
IsThemeActive
CloseThemeData
GetThemeColor
GetThemeBool
GetThemeEnumValue
GetThemeTextMetrics
DrawThemeBackground
OpenThemeData
DrawThemeEdge
CloseThemeData
SetWindowTheme

fmifs

Extend
Extend
Extend
Extend

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE