f7fa11b846d85377a7a1f7aa87a307a0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7fa11b846d85377a7a1f7aa87a307a0N
Size

44KB
MD5

f7fa11b846d85377a7a1f7aa87a307a0
SHA1

4b0a6a967365a8e6d5735c3d49e45cfa9b06a00b
SHA256

9aa408294b94a6e320e17e478df176cbe0b3563e37d91d1112865e1295311e94
SHA512

90b1df6eb4b49a4e534798d10070d1c05e390e27d315d39bc131dd2ab41155ca06e57b864833f6560c3b75b71857afd1b0d5f7f8b4dd4664aaa52d029c5797af
SSDEEP

768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnY1n9b:m5nkFNMOtEvwDpjG8hgpY19b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7fa11b846d85377a7a1f7aa87a307a0N

Files

f7fa11b846d85377a7a1f7aa87a307a0N
.exe windows:5 windows x86 arch:x86

e021c9fc2c12265365fad587d43783fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

EndPaint

gdi32

CreateFontIndirectA

Sections

.MPRESS1
Size: 10KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE