7a44924f184dfd34c59707907390ede72ad14dfb5d5d21d8eabc7a038e9069d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a44924f184dfd34c59707907390ede72ad14dfb5d5d21d8eabc7a038e9069d5
Size

119KB
MD5

68382f87f01b36983fe3ae49407523f3
SHA1

1537531fa7381c4a76b080833bb6299df3afa926
SHA256

7a44924f184dfd34c59707907390ede72ad14dfb5d5d21d8eabc7a038e9069d5
SHA512

0763f5b58888c776bcbe59b68d41ac0e2852b2befbd29ab84552ba6a5a538e8dc443c6d7455b0521ff6fb2a9608f5cfe74e3f2ac5ac8448de2075b7e41196cf3
SSDEEP

3072:TDF93JjltiJyoyFWBbPfASsvbk7hWAM5Vn1I6a:TpZU1VBbPfzddolIP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a44924f184dfd34c59707907390ede72ad14dfb5d5d21d8eabc7a038e9069d5

Files

7a44924f184dfd34c59707907390ede72ad14dfb5d5d21d8eabc7a038e9069d5
.exe windows:4 windows x86 arch:x86

6e340d0758be20c8408ead3a4b2849a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleScreenBufferInfoEx
CreateSymbolicLinkTransactedA
BuildCommDCBAndTimeoutsW
VirtualFree
HeapValidate
SetThreadStackGuarantee
K32GetWsChanges
AddVectoredContinueHandler
SetCommTimeouts
DisableThreadLibraryCalls

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE