7c6c689c1d46e63e2aef2001a2af80b0fdaf81f0a2233729f71aba331e11bb43 | Triage

Sharing

General

Target

7c6c689c1d46e63e2aef2001a2af80b0fdaf81f0a2233729f71aba331e11bb43
Size

1.8MB
MD5

f3f17cbbaa9d9602f7664d9a62326d0a
SHA1

77872f2332f0b1ff8e2a1169b163de554ac98f4b
SHA256

7c6c689c1d46e63e2aef2001a2af80b0fdaf81f0a2233729f71aba331e11bb43
SHA512

80b8c5a7a3fd00abac87d19c52aac2d2970e7c5fc5041a2ad8587cdfffa233d5de5ab55b059aed387ebc2411a3d2960c6a02e74e60d7ab1d992744439aae9915
SSDEEP

49152:HyKWunwayEtQ1dftk0ikA2emQJIeLlOBt1KtoqhJeaX:HUIwectSyQ7lq129hIaX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c6c689c1d46e63e2aef2001a2af80b0fdaf81f0a2233729f71aba331e11bb43

Files

7c6c689c1d46e63e2aef2001a2af80b0fdaf81f0a2233729f71aba331e11bb43
.exe windows:5 windows x86 arch:x86

dfc6dbbcea4beda15dcbddfb77d26fc5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoUninitialize
CoInitializeEx

shell32

ShellExecuteExW
ShellExecuteW

user32

wsprintfW
MessageBoxW

kernel32

CreateDirectoryW
lstrcpyW
DeleteFileW
CloseHandle
RemoveDirectoryW
LockResource
LoadLibraryA
GetProcAddress
GetLastError
GetTempPathW
GetStartupInfoW
ExitProcess
GetCommandLineW
FindResourceW
FreeLibrary
LoadResource
VerSetConditionMask
SetEnvironmentVariableW
WaitForSingleObject
GetModuleHandleW
WriteFile
SizeofResource
GetExitCodeProcess
GetModuleFileNameW
CreateFileW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ