reso7[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

reso7.exe
Size

11KB
MD5

af60e3266d3e0ef8a0911571e1651e6c
SHA1

d271d0c7e54d463ecc22d2db900f4cd36d665c8f
SHA256

6cfadfe19b656acfd9de9bd2bff609e33e4d33299ba34be779586aabe318252e
SHA512

bed7d20d5c28253772f3dbc94fa090d84172b3f41a9904edf21b0ef7e73050f52b43f1f261ea3785ebad716c0ca00ec5aa825bb489ddcdeba9ee475168e432f0
SSDEEP

96:q8WhnVmUbWQ8mtzCGs2/ns8AvlPHGKG1J1P/uMbXm+OlYBgSub0c2W1nJVGKL1JM:OVmVbmtzCGs2UrRG1b7tBRK08Vdcc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
reso7.exe

Files

reso7.exe
.exe windows:6 windows x86 arch:x86

ae0d611e81a03e69be6c7e15e7d176ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
lstrcatA
GetCommandLineA
GetModuleHandleA
GetVersion
ExitProcess
WaitForSingleObject
GetFileAttributesA
GetCurrentDirectoryA
lstrlenA

user32

MessageBoxA
SetClassLongA
LoadIconA
ChangeDisplaySettingsA
EnumDisplaySettingsA
wsprintfA
AppendMenuA
GetSystemMenu
SendDlgItemMessageA
GetDlgItemTextA
SetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxParamA
ShowWindow
SendMessageA
wsprintfW
GetDC

gdi32

GetDeviceCaps

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteExA

ole32

OleUninitialize
OleInitialize
CoCreateInstance

shlwapi

StrRChrA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ