7156c7be7775e959547459b670f5d3a0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7156c7be7775e959547459b670f5d3a0N.exe
Size

279KB
MD5

7156c7be7775e959547459b670f5d3a0
SHA1

02d988711e69009087f0b5e4beacd2901fca3da4
SHA256

4c30e36927c3b706a2260f3b63ef5945eaad3e6c4a7f3ae76a2e2291e872ec32
SHA512

d6ab9405f3bd0dee0eb067b1f4bc918faca0731489d1d6e3bc37739c84d1c78d0b47c66096757434fff8223394e40e90b7ecdb2fe1ad2fa72648cb0bed77bc73
SSDEEP

3072:dFmD9UjrL5vSfmX3XkDP1vAzrnVLyFuESE6asU9JrAukDlCFccHrE:LaUTxSfmX30DP1venwsI6I9hmlJcLE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7156c7be7775e959547459b670f5d3a0N.exe

Files

7156c7be7775e959547459b670f5d3a0N.exe
.exe windows:5 windows x86 arch:x86

eb72c8b416e71facfb6beb377e02c6b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
VirtualAlloc
CloseHandle
CreateFileW
DeviceIoControl
GetModuleHandleA
GetDriveTypeW
GetLastError
GetModuleHandleW
GetStartupInfoA
LocalFree
FormatMessageW
ExitProcess

user32

DialogBoxParamA
SetFocus
LoadCursorA
LoadIconW
LoadIconA
LoadCursorW
DialogBoxParamW
EnableWindow
GetDesktopWindow
GetDlgItem
IsDlgButtonChecked
LoadStringW
MessageBoxW
AnimateWindow
EndDialog

advapi32

RegOpenKeyExW

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
exit

Sections

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ