c78ca1062996a255fbfba20552406360_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c78ca1062996a255fbfba20552406360_exe32.exe
Size

23KB
MD5

c78ca1062996a255fbfba20552406360
SHA1

719bc695cbf1b5bfdb8136f5773da1a6041d5b58
SHA256

4fd440d2644d2aa660b4513c8408c15ae6b76963b6d2e09437917c77997945a0
SHA512

bbd2d989c66cd39fc3d07155d97a3519347b968e264ec2bd5e477aff00d42aed68a0822afba5e2efcecc67619e9c390e775152abd75d6d0f184bbe569dd17709
SSDEEP

384:OndT/biH2yk7BPnO6RqvdC/952oLjx96bvfw0yY9:AfyUBPlg0lv6bvfw05

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78ca1062996a255fbfba20552406360_exe32.exe

Files

c78ca1062996a255fbfba20552406360_exe32.exe
.exe windows:4 windows x86

a79387d1faab93d53469d6b3d5b2f4f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
DestroyWindow
PostQuitMessage
DefWindowProcA
CreateWindowExA
LoadCursorA
LoadIconA
RegisterClassExA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetCommandLineA
GetStartupInfoA
ExitProcess
HeapAlloc
DeleteFileA
GetLastError
CloseHandle
GetEnvironmentStringsA
LeaveCriticalSection
GetModuleHandleA
lstrcpyA
LoadLibraryA
GetProcessHeap
GetLocalTime
DeleteCriticalSection
EnterCriticalSection

comctl32

ord17

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ