c7d4bffbb1406880e842150ec43fe3c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7d4bffbb1406880e842150ec43fe3c0
Size

230KB
MD5

c7d4bffbb1406880e842150ec43fe3c0
SHA1

5b78ecd8a63b7f8eb57fc7cdf9562711a8a40936
SHA256

96110386bea03cf68137d13ef9d3a522532fc4187e5448b43f0022711fe5d000
SHA512

3b3cface9d0fc7376065ea35d7990ddf04ad57ded391fdd60198a3a95b0e35fcc7b5b291b3e7e7f9b5e1fce7bb35dcfb77746fbd84db26955d8e7c05b9d79ac4
SSDEEP

6144:4oxRdBtnUZuyrcrEjyO5QqxCCNjtf0SE630htPzHmYuL4:4W9nUZkEjyO5tCCNjtf3ZETPzHml0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7d4bffbb1406880e842150ec43fe3c0

Files

c7d4bffbb1406880e842150ec43fe3c0
.exe windows:6 windows x86 arch:x86

439ff53323e9506db8654c0d8af9cf37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
GetConsoleOutputCP
GetLastError
GetModuleHandleW
GetProcessHeap
GetStdHandle
HeapAlloc
HeapFree
LocalFree
VirtualProtect
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrlenW

ole32

OleUninitialize

user32

LoadStringW

msvcrt

malloc
memset
towlower

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 765B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ