7f8fd0467c632155921c4571be18dd60N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f8fd0467c632155921c4571be18dd60N
Size

16KB
MD5

7f8fd0467c632155921c4571be18dd60
SHA1

780e5ae84216bf36d23e17c60e54abfdd6e14940
SHA256

bc14f3c7fea4ade8dbba3597ab791aee470c0ae4132d1a96f01bb6283f88511d
SHA512

068326f23541143213f3484d83644ba833726ff583babb7358960620c2f405b2316c1dbc09e6b78ca5826d413fcb2a5d93c94adf7f42e1dd939cd198094ad11a
SSDEEP

384:9cd6w+NomiUBQZVoRiCKKtYh2pNvdAaurNW:qIomvQ7oTOUVAaurNW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f8fd0467c632155921c4571be18dd60N

Files

7f8fd0467c632155921c4571be18dd60N
.exe windows:4 windows x86 arch:x86

d212f4856ef91a73d17f9e9cdf7752bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
GetMessageW
CreateWindowExW
RegisterClassExW
ClientToScreen
CloseClipboard
PostMessageW
CharLowerW
UpdateWindow
ChangeClipboardChain

kernel32

ExitProcess
GetModuleHandleA
GetStartupInfoA
GetModuleHandleW
HeapAlloc
GetProcessHeap
lstrcatW
HeapFree
lstrcpyW
GetCommandLineA

comctl32

ImageList_Create
ord17

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ