c7ca424f171fe81af414238b383fdd3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7ca424f171fe81af414238b383fdd3e
Size

132KB
MD5

c7ca424f171fe81af414238b383fdd3e
SHA1

b7ab19ed7de3e74cf0627119e7b4de5a76e681ff
SHA256

6c60e9a682ca5ba807cce7e0f5bfb1d6020520ae3af60490c31276cc7eae921b
SHA512

302aa8d45c64e818009a4f377a37114cfdceb60cdb4204ceeed7849dee6f2f4729c97b6bd9cfa3882b151a7430e690a88a545f9d644444396ab83a1576831f87
SSDEEP

3072:j6Iob0s9S/urIlrDiwnxPlSf94OBLnYmxm99B17kod9fZzzH52i:jGAWS2dmx8qs7YmkTHZnfR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7ca424f171fe81af414238b383fdd3e

Files

c7ca424f171fe81af414238b383fdd3e
.exe windows:4 windows x86 arch:x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE