7b594df7dba746403692f75c834246edfc4b442053e1e8bdaacaa3ed5651a74f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7b594df7dba746403692f75c834246edfc4b442053e1e8bdaacaa3ed5651a74f
Size

57KB
MD5

976f22c48a97e616fc09fd7ef2999ac0
SHA1

cf66d466e8171644157678d8236fb100aab12e23
SHA256

7b594df7dba746403692f75c834246edfc4b442053e1e8bdaacaa3ed5651a74f
SHA512

8c2949a86e386348b53027fde0fd1b3608a507ef35f1adc3fd58f59ebdc2f42df2d3e707ea0a4fd5d4d1dd7c5b8dc439afda775ef08877efd118e360f6f9517f
SSDEEP

768:vDqYnMTOV5ZXO9o56McUyc8fHAl4MbPA9ScVOuuGMp0scvQC3e:AOjXO2MMcUyc2XM89JuGrvQCO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b594df7dba746403692f75c834246edfc4b442053e1e8bdaacaa3ed5651a74f

Files

7b594df7dba746403692f75c834246edfc4b442053e1e8bdaacaa3ed5651a74f
.exe windows:5 windows x86 arch:x86

5038cc1d7d4ba6ce1ebcfec67b707138

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualFree
IsBadReadPtr
LoadLibraryA
SetLastError
ExitProcess
FreeLibrary
GetModuleHandleA

user32

MessageBoxIndirectA
SendMessageA
DialogBoxParamA
GetDlgItem
EndDialog
LoadIconA

comctl32

InitCommonControlsEx

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ