7ddd002f9f59e60ff55334defbe237a08cdbb5449e77702cc5b3a31bfb168ae9 | Triage

Sharing

General

Target

7ddd002f9f59e60ff55334defbe237a08cdbb5449e77702cc5b3a31bfb168ae9
Size

41KB
MD5

514c89602b83bad3a49c199692cb5d71
SHA1

b0b699d17b38992a2a591b2be234ac2f5f137c6b
SHA256

7ddd002f9f59e60ff55334defbe237a08cdbb5449e77702cc5b3a31bfb168ae9
SHA512

964e8b23b982e4a206668a9797ce3aa46403a61ab0a7909933dd36fcb91b27bae114320026957b0fe7427e9f7a2adb9a9cd91f21981fc63d385966af980f88ed
SSDEEP

768:HLPrY1bbnUFrhy0RzOb7uKibn1eEe+3nv73ChHPFCgTenuVMMs:HLPrYRbnUphzOb7uKA1NnjChvVTskg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ddd002f9f59e60ff55334defbe237a08cdbb5449e77702cc5b3a31bfb168ae9

Files

7ddd002f9f59e60ff55334defbe237a08cdbb5449e77702cc5b3a31bfb168ae9
.exe windows:4 windows x86 arch:x86

007768d5bac775f4025b0efc96fecfb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessA
FindResourceA
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
LoadLibraryA
LoadResource
LocalAlloc
LockResource
VirtualAllocEx
VirtualFree
VirtualProtect

user32

GetForegroundWindow
IsChild
IsIconic
IsWindow
IsWindowUnicode
IsWindowVisible
IsZoomed

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 64B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE