7fb19460356f40175fa1241f6d1ef3524011100bb38f14d3a2a1f571295efb9a | Triage

Sharing

General

Target

7fb19460356f40175fa1241f6d1ef3524011100bb38f14d3a2a1f571295efb9a
Size

24KB
MD5

562b96613745d432f567ced33a2f4565
SHA1

a2ba2c7f0995c391d958ff167ae44418d027139f
SHA256

7fb19460356f40175fa1241f6d1ef3524011100bb38f14d3a2a1f571295efb9a
SHA512

5d0b16e75fd81394927496c9396621e821c1c17ed248bf06376ccb9765a1ebdd01e275fb3a753478e6906975bfce4a5a253b0e8ec2d11d176b7304374d848742
SSDEEP

384:ErzPixtQo41knymocs7c+ozCKm/7h3A0aBdt0o+NW45ebFObCF4:ErzKSbeymoHozfw7h3dUv0SnUbo4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7fb19460356f40175fa1241f6d1ef3524011100bb38f14d3a2a1f571295efb9a

Files

7fb19460356f40175fa1241f6d1ef3524011100bb38f14d3a2a1f571295efb9a
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE