7b5c3a3b5f9ae9ee5f768aea968d6d00N | Triage

Sharing

General

Target

7b5c3a3b5f9ae9ee5f768aea968d6d00N
Size

23KB
MD5

7b5c3a3b5f9ae9ee5f768aea968d6d00
SHA1

e3e01c78a23352be651a4e162a9719e1e5f23fea
SHA256

e171f2a66bb5a4b5ee22cba61ae1cd602f80bcc478507d4a662b0ba91f59536a
SHA512

00050e58898c59bd8ae64186a97a91dbbb7414a30e70fb19cc39196e81cc26818d76062472a60fdb5a12773c26cd95875e13d10195bbc7355a5f4ae2d1b1b3bd
SSDEEP

192:TJdes9Z5rM9GY25QbKVKgZF38qDx5HE0Fpxctzh08PzeaMBGE4XtkTUCz3VtHGFx:T6cPvNpxvqefBdwtkTUCrPHc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b5c3a3b5f9ae9ee5f768aea968d6d00N

Files

7b5c3a3b5f9ae9ee5f768aea968d6d00N
.exe windows:4 windows x86 arch:x86

817fafd0a5f10b469613271a41128d1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
DestroyWindow
BeginPaint
EndPaint
SendMessageA
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA

kernel32

GetCommandLineA
GetModuleHandleA
ExitProcess
HeapAlloc
GetStartupInfoA
lstrcpynA
GetFileSize
GetProcessHeap
lstrcatA
CreateFileA
ReadFile
CloseHandle

comctl32

ord17

msvcrt

_itoa
atoi
atof

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ