7db31f6603a490c42a1b50efa7f0c808d21a97847e1e5daff76f172f687dad95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7db31f6603a490c42a1b50efa7f0c808d21a97847e1e5daff76f172f687dad95
Size

31KB
MD5

370337daa7e99d1cfaef78def4d0bfc8
SHA1

9925a41ad5f66b348fab1be3c57f7dff919d91db
SHA256

7db31f6603a490c42a1b50efa7f0c808d21a97847e1e5daff76f172f687dad95
SHA512

c871b6fc93d214c9f1d23268a2dd9f06336f05c4910c94c455769b49eea37b836613058d97074e8fc5fe1deb073c1ad09f544bc386116d6475e786ceecd6a00f
SSDEEP

768:B2tE33+/KmEww1QdVM6d1oLarm0MDWiXPj7kzd8Ww:BnnqEiWCoeyRVb7kh8W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7db31f6603a490c42a1b50efa7f0c808d21a97847e1e5daff76f172f687dad95

Files

7db31f6603a490c42a1b50efa7f0c808d21a97847e1e5daff76f172f687dad95
.exe windows:4 windows x86 arch:x86

9b6c16806d3541af53a41fd8fc36f95c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTapeParameters
MapUserPhysicalPagesScatter
MoveFileW
EraseTape
CreateIoCompletionPort
CompareStringA
SetVolumeMountPointA
CreateTimerQueueTimer
CreateFileA
AllocateUserPhysicalPages
CreateNamedPipeA
GetEnvironmentVariableA
SearchPathA
CreateHardLinkA
DebugBreak
UnlockFile
DebugActiveProcess
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ