c7da576eec68bac615ccb824227d1364 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7da576eec68bac615ccb824227d1364
Size

4KB
MD5

c7da576eec68bac615ccb824227d1364
SHA1

6485465a5212bea04debae4bc0cc9bf183a0a63e
SHA256

2eec187b107735fd4c7bd70827bdde126ef92748a212ff915dfd8593648e4dd0
SHA512

7815167af8a7d33e318518db0cfb9089043da696d89589f1e21421d255b324a43f8b6440f37569bee7fe861d084fe21c3dc5a7f5952e79149610a9d9d209552a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7da576eec68bac615ccb824227d1364

Files

c7da576eec68bac615ccb824227d1364
.exe windows:4 windows x86 arch:x86

583722b98cdbb3dfa6ee6f34958b8f6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCurrentDirectoryA
GetDriveTypeA
GetModuleFileNameA
GetProcAddress
GetTempPathA
GetVersion
LoadLibraryA
SetCurrentDirectoryA
Sleep
WriteFile
lstrcatA
lstrcpyA
lstrlenA

user32

wsprintfA

shlwapi

SHSetValueA
SHGetValueA

wsock32

inet_addr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE