b7dc329b617f0db0e4fceeba3ed3e17bd70346bc1940e840940eaade41389a85N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7dc329b617f0db0e4fceeba3ed3e17bd70346bc1940e840940eaade41389a85N
Size

15KB
MD5

31320f34217c657a46302e90b4c0e9d0
SHA1

1228fc780a16bb1be63ad5c5d30fa62f95cdf09c
SHA256

b7dc329b617f0db0e4fceeba3ed3e17bd70346bc1940e840940eaade41389a85
SHA512

bf43bf4e832db26629f3eced4024873e78c8cc2a2196cb7f31d55d7ba1d80db5665288af9d710621ab3e02c317d6ee7ca80c8b11d4ec2a3987452b8bf709499d
SSDEEP

96:+SX8A4s8jLTixNirOlEQQhwrGK1RkuDNtboyn:+aR4hTixNi6QW1Rks1oyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7dc329b617f0db0e4fceeba3ed3e17bd70346bc1940e840940eaade41389a85N

Files

b7dc329b617f0db0e4fceeba3ed3e17bd70346bc1940e840940eaade41389a85N
.exe windows:4 windows x86 arch:x86

eabb4280ac342645164868dcdab18c4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FreeResource
SetEnvironmentVariableW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
TlsGetValue
QueryPerformanceCounter

user32

CreateAcceleratorTableA
GetQueueStatus

gdi32

DeleteObject

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

......
Size: 4KB - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.....
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ