b7ef810b0d6f4f0adb71b98e3a710ac0 | Triage

Sharing

General

Target

b7ef810b0d6f4f0adb71b98e3a710ac0
Size

53KB
MD5

b7ef810b0d6f4f0adb71b98e3a710ac0
SHA1

9fc56350b2cc07afec7ed1b3a0e922c3a0d358dd
SHA256

0499a88cacaa4becef78439f7a9c783573234350ef7a28a15652d9f486c7758a
SHA512

d6b47048b4483ec2876fda7c7f80cb582de027f8fe1d76761d961fe4619df8e11e392216d563cf437cc6367079fac9cec69c637fce4eb45cf1393e5bb8a7baf0
SSDEEP

768:6JvOR3dh3XUZaotCu7agzPcQ1CFX42AOAzkVfckbPdXiUJ8XQLD7H6hDmmo6Orhp:6U3ALCulPck0NO4VfZbYMl71mOFQ9E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7ef810b0d6f4f0adb71b98e3a710ac0

Files

b7ef810b0d6f4f0adb71b98e3a710ac0
.exe windows:5 windows x86 arch:x86

a742ae80ccfb8fd2f0df90992e931b23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock

shlwapi

PathFileExistsW
PathFindFileNameW
PathMatchSpecW
SHDeleteKeyA
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA

user32

CharLowerBuffA
DrawIcon
ExitWindowsEx
GetClassNameA
GetDlgItem
GetForegroundWindow
LoadCursorA
OpenDesktopA
PeekMessageA
SendMessageA
ToUnicode

Sections

.orip
Size: 43KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vcpab
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fapkh
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ