c7e7fc184da8b492775e899eeef699601a0bbd7a49535f0a71fce7a0b7086002 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7e7fc184da8b492775e899eeef699601a0bbd7a49535f0a71fce7a0b7086002
Size

2.4MB
MD5

700c6dda3dec1ed0a0f516ae7d6f6b78
SHA1

54d1d65e3e3dfe6d71aa3858bd6b1ebc0d5092a3
SHA256

c7e7fc184da8b492775e899eeef699601a0bbd7a49535f0a71fce7a0b7086002
SHA512

019ae223c45504d04cbc1c810bc192092aeada2ce5a2ccc43066c9bd1f8d96db04d479a8909cee2473a220b223eb2f1990a2f0b2dd128e277de295c84c0b21de
SSDEEP

49152:27FfabdPseJ53ACb2EUxed5ABLxkuWgb3V2oRnTuf+w5yLqAoN:qab55wW2EUEZ4bF2ine5y+AoN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7e7fc184da8b492775e899eeef699601a0bbd7a49535f0a71fce7a0b7086002

Files

c7e7fc184da8b492775e899eeef699601a0bbd7a49535f0a71fce7a0b7086002
.dll windows:5 windows x86 arch:x86

e898e6057d6c0f326f28e1d24827f7b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

SafeArrayCreateVector

mprapi

MprAdminPortDisconnect

gdi32

AbortDoc

advapi32

RemoveUsersFromEncryptedFile
GetOldestEventLogRecord

kernel32

GetModuleHandleW
GetUserDefaultLangID
LoadLibraryExA
OutputDebugStringA

user32

ChangeMenuW
TrackPopupMenu
ReleaseCapture
LockWindowUpdate

Exports

Exports

VzhhoaeEnwsasio

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.crt
Size: 4KB - Virtual size: 121B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.data
Size: 224KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ