c7dd689600aa4bdf1c16c02a40472a79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7dd689600aa4bdf1c16c02a40472a79
Size

18KB
MD5

c7dd689600aa4bdf1c16c02a40472a79
SHA1

f6ecfbe7c4aed6389c49249a830845edb2b0edf2
SHA256

7ddc91698991301cd036beaec5e907d5187ffa71dcc1b820fb6db30dd2485094
SHA512

c8d49c0c3f9a0d6c7ab0c41b82e2826a9c6c6e07c73c3fc7892d47f7051e2ff2c68818a1299cea0f7150cebcca119f48275b53627a457fffb01af60f81b2974b
SSDEEP

384:z4kqW7wCV9brIXxnYxns325yA5ylwKLSbAKSWZV:Dn/VVUIyA5CXubAKSY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7dd689600aa4bdf1c16c02a40472a79

Files

c7dd689600aa4bdf1c16c02a40472a79
.exe windows:4 windows x86 arch:x86

2d7b9659c5458c60446c5f08d06ded7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
signal

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 84B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE