070b7c6a1a22fe83b7a0b02f74d4b4defbe9ce4afa45c3e957514bd9df523128[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

070b7c6a1a22fe83b7a0b02f74d4b4defbe9ce4afa45c3e957514bd9df523128.exe
Size

55KB
MD5

b23039e4f3b25b6a5a80837138d732f9
SHA1

af3b98c231c942a32e129603d663433c081e6cca
SHA256

070b7c6a1a22fe83b7a0b02f74d4b4defbe9ce4afa45c3e957514bd9df523128
SHA512

9abc0228dc79b16438483d47e875e16fc337fedd32abd094d7c5f65207d1c80a77f921eedb3f551a7199fb56c2a7323bcc5b6837e0fd0a97395062a139ebf7d2
SSDEEP

768:b7o/2n1TCraU6GD1a4Xcn62tH/1/Lp17zJIfeVEuUr6a:bc/y2lm6iH/NLp17zrV9o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
070b7c6a1a22fe83b7a0b02f74d4b4defbe9ce4afa45c3e957514bd9df523128.exe

Files

070b7c6a1a22fe83b7a0b02f74d4b4defbe9ce4afa45c3e957514bd9df523128.exe
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ