7956cfefe3c3e1cd677151764c2727c0[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7956cfefe3c3e1cd677151764c2727c0.bin
Size

179KB
MD5

7956cfefe3c3e1cd677151764c2727c0
SHA1

b6bbea5fb3b64035d78137ea67c94e2b49fe13ff
SHA256

697e1706f0e735175723a192dcf9715ec400688e13b06ffbe4138e27e1fdd56f
SHA512

65f875b4cea77a1a5e9fb9e21005d3ddeb763c6b2080396c9e31fcfcc80033a3a61fe88d64099013a01ef2259e1c682443de2ad6bdc1b436851f0d033cbdee07
SSDEEP

3072:Dk0tgvyUO7tEfGlbmYxE0sZRlbhBzieMA8+3VlthuqBl3tlfpXOTlJmoyMJhjKa3:mxO7eudNsNtBziVRethTlPRUmDeKmw4R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7956cfefe3c3e1cd677151764c2727c0.bin

Files

7956cfefe3c3e1cd677151764c2727c0.bin
.exe windows:4 windows x86 arch:x86

b685f9ebd4c3d044604741ab8325b01e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetStockObject

user32

PostQuitMessage
RegisterClassExA
SendMessageA
SetFocus
MoveWindow
SetWindowLongA
SetWindowWord
ShowWindow
TranslateMessage
UpdateWindow
MessageBoxA
LoadIconA
LoadCursorA
GetWindowTextA
GetSystemMetrics
GetMessageA
GetClientRect
GetClassNameA
EnumWindows
DispatchMessageA
DefWindowProcA
CreateWindowExA
CallWindowProcA
SetForegroundWindow

kernel32

ExitProcess
VirtualProtect
Sleep
RtlZeroMemory
LoadLibraryA
GetModuleHandleA
GetLastError
GetCommandLineA
CreateThread

comctl32

InitCommonControls

msvcrt

atoi

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ