c7870957e64961953c93e487454db8ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7870957e64961953c93e487454db8ac
Size

83KB
MD5

c7870957e64961953c93e487454db8ac
SHA1

96ebcf8e923349cf4b8c1be624bd77e1e1ac1901
SHA256

a06b62e2ff2454196c88bcacc73e3090f4c6fe41968aa7697fce8da3acadfa72
SHA512

002aec83d39906c074bf9bbe0eb54a884191e5495cf3087e3308abad7911b7e129bf789b777e12861a76abd82c9ea50ea82f8b9998a63db1b43fe7e9b8ebe142
SSDEEP

1536:ec8888AnXdZIpUxzoTsfmzs9Nj+fxKeYPoVKiByKo80iMKeIP3qNjEErxTWDTMq4:ec8888AAqENeAEPoVKY0iMVIP3SjBkMV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7870957e64961953c93e487454db8ac

Files

c7870957e64961953c93e487454db8ac
.exe windows:4 windows x86 arch:x86

f48491c8a53896f68e12a20f014225da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsW
LockFile
LocalUnlock
CopyFileExA
MapUserPhysicalPages
EnumResourceNamesW
Process32FirstW
DeleteFiber
UnlockFile
FreeConsole
SetEndOfFile
OpenMutexW
NlsConvertIntegerToString

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE