e07cd735a7a0c7c0c26be1e739217f76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e07cd735a7a0c7c0c26be1e739217f76
Size

375KB
MD5

e07cd735a7a0c7c0c26be1e739217f76
SHA1

dc74a546f87327a4f436f001f388493963d67024
SHA256

a5f01c63ba4c1029292bdcd21f7a9a81013196e9dfa47eba27f6f3d5512981ee
SHA512

2a9032e8682fa8fd096c3af2ed0f9230ec8108b436b28a8e6fed04fbe6e582804392d9edf487583ff495762e29b6c850ec25d7755c193bdef71d4c0ad6685e01
SSDEEP

6144:942Pm9oF0rzKEpKQoP5WlFmkHo66zaJtC3Rgo3hA9x1bdktdbsEnH:W2e9oiZIQoPcl0e96zaTC3WoR+1bdYd9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e07cd735a7a0c7c0c26be1e739217f76

Files

e07cd735a7a0c7c0c26be1e739217f76
.exe windows:4 windows x86 arch:x86

dcf6782f1a1eedeb539b8de1d97e495d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.snaker
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE