d7ba412bb5375274a9fe4b74ace372ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7ba412bb5375274a9fe4b74ace372ba
Size

34KB
MD5

d7ba412bb5375274a9fe4b74ace372ba
SHA1

1d40bd002bf48c7d539cc2bb3a5f4d1760e472ec
SHA256

65c98ee18fc4e2caaa95705e12915794497d7c54d68d888d2a4b13095e82fd23
SHA512

ca6c7ba61e39ea424783300de294d0af078f1e1be7137412dbcc9efaec4be40ac16f7b659841768d8534088f5965347125edbc9f79bfd20e757e018820e05292
SSDEEP

768:XywXEvqp0QYi8AO6f0C98/LiUiStw3M3fH7U:CeEv7TA5Duvisw83

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d7ba412bb5375274a9fe4b74ace372ba

Files

d7ba412bb5375274a9fe4b74ace372ba
.exe windows:4 windows x86 arch:x86

2b6906acf5d8349b80d31ba15df97428

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetDIBColorTable
SetICMMode
SetRelAbs
ResetDCW
StretchBlt
UpdateColors
SaveDC
TextOutW

shell32

StrStrIA
SHAppBarMessage
SHFormatDrive

urlmon

GetClassFileOrMime
IsLoggingEnabledA
URLOpenStreamA
CoInstall
AsyncInstallDistributionUnit
IsValidURL

Sections

.text
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE