7f566341d8c4b77e44e23ad818858c766dcca58b76a6600befef7999131edb12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f566341d8c4b77e44e23ad818858c766dcca58b76a6600befef7999131edb12
Size

25KB
MD5

213e3294359de1a612627d3f1d2bfd5b
SHA1

c87147108ca37e29a2b4d10d11710c7c97bdd9e3
SHA256

7f566341d8c4b77e44e23ad818858c766dcca58b76a6600befef7999131edb12
SHA512

09d418530a1fe87999279b3a3140fcad26e19c8df35acf67283ea80df0905307b35650a9f4a83d495fb078d254cf43b7a8584f0e2354b1e4cf8f1b692be9a135
SSDEEP

384:0u1MfDP3WwG1pB/yQWOO/+0l+WHrp3MwBaHD:dSa/XB/KTG0lXr5MeaD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f566341d8c4b77e44e23ad818858c766dcca58b76a6600befef7999131edb12

Files

7f566341d8c4b77e44e23ad818858c766dcca58b76a6600befef7999131edb12
.exe windows:4 windows x86 arch:x86

8b952403cd7980f20cd10a1500bc5902

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenStorage
CoInitialize

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

advapi32

CredFree

dhcpcsvc

DhcpDeRegisterParamChange

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ