d07fdaed46b8e2aaeff8e8ee3158dbe6ff09391ee0fb670778dc3551023a91ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d07fdaed46b8e2aaeff8e8ee3158dbe6ff09391ee0fb670778dc3551023a91ee
Size

43KB
MD5

007dd4fdef0cf5f008dc2d71d40d4ab3
SHA1

73f72f3272aebbf629370f66fe6391b22082c5f3
SHA256

d07fdaed46b8e2aaeff8e8ee3158dbe6ff09391ee0fb670778dc3551023a91ee
SHA512

7f331185835142bc46f39685bb9d11a5f11b9143f7d045c877c63dd55fc6315770eba5f36b6becfb6f402918f301667290c62ec796cd6273d156e932484da8d1
SSDEEP

768:N11yvTS3Jub0XwY0sMOM7+OHEWPNVr3g290/a:Nmu9jNepwa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d07fdaed46b8e2aaeff8e8ee3158dbe6ff09391ee0fb670778dc3551023a91ee

Files

d07fdaed46b8e2aaeff8e8ee3158dbe6ff09391ee0fb670778dc3551023a91ee
.exe windows:5 windows x86 arch:x86

6f5bca5174d1bf998210e6197e266554

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetProcAddress
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
SearchPathA
GetCurrentProcessId
CreateProcessA
GetStartupInfoA

msvcrt

_cexit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_c_exit
exit

advapi32

RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE