b7e70a6e02ab3caeb52cfcda397f8f2b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7e70a6e02ab3caeb52cfcda397f8f2b
Size

200KB
MD5

b7e70a6e02ab3caeb52cfcda397f8f2b
SHA1

4b2633a12bb001f8055c9c69e4bf0f3eaad87c19
SHA256

55ed848247fca23bf5b5256b796b6409c70653d268bb43e5aefdabc67998ac55
SHA512

7971d2cf68c3baa17fa7a445923a3594da991dd811a83cd837b7efe16b3eb91f86a61d542ab9a5be623da832665f74e60e487bd07219714b8a3d6dcafdfbed6e
SSDEEP

6144:ilLq/I+mO31DBybYdTJgr9OuZjOVce3BHdmzG3k:qLqbN33RJgnRgVH4zG0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7e70a6e02ab3caeb52cfcda397f8f2b

Files

b7e70a6e02ab3caeb52cfcda397f8f2b
.exe windows:5 windows x86 arch:x86

cdf2744517d359497352b1c6d6f150e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
Beep
WaitForMultipleObjects
HeapFree
GetModuleHandleA
GetDriveTypeA
DeleteAtom
FindAtomA
RemoveDirectoryA
GetFileType
CreateDirectoryA
CreatePipe
GetTapeStatus
FindClose
AddAtomW
SetVolumeLabelA
CloseHandle
HeapCreate
GetCommandLineA
WriteFile
CreateSemaphoreW
GetVersion
RemoveDirectoryA
IsBadWritePtr
GetModuleFileNameA

uxtheme

OpenThemeData
DrawThemeBackground
GetThemeColor
CloseThemeData
GetWindowTheme
GetThemeTextExtent
GetThemeSysSize
GetThemeTextMetrics
CloseThemeData
IsThemeActive
SetWindowTheme
DrawThemeEdge
GetThemeBool

odbcbcp

bcp_bind
bcp_bind
bcp_bind
bcp_bind

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE