b7840cd4f5f9eb09692155ca37757ae63847bccae5d03ad24cfaf610333f737d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7840cd4f5f9eb09692155ca37757ae63847bccae5d03ad24cfaf610333f737d
Size

3.6MB
MD5

0046259e6d130c44208b637873a7f42e
SHA1

10f0bd100d2de3dfb181a3bcbb0da898025e04fe
SHA256

b7840cd4f5f9eb09692155ca37757ae63847bccae5d03ad24cfaf610333f737d
SHA512

27ca16ca9099e87068c71297df3516b9eae66972f713d98a4de378ece4b288180cc0c56a131eebf8fcfb95279ed1e2d16283ce8c2958bf7aec509fa61ebc4bfe
SSDEEP

98304:k0ZcxLjsINs4BQcGFH+qd3sa/9iRUJAaOH8+MdBz9vB2k:kHLo+lGFHRd3dV4P0dvBN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7840cd4f5f9eb09692155ca37757ae63847bccae5d03ad24cfaf610333f737d

Files

b7840cd4f5f9eb09692155ca37757ae63847bccae5d03ad24cfaf610333f737d
.exe windows:5 windows x86 arch:x86

0406db788a283da81a0636acbf958422

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 792KB - Virtual size: 792KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ