79a84052a7b3d34775a1853bc17872f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79a84052a7b3d34775a1853bc17872f5
Size

326KB
MD5

79a84052a7b3d34775a1853bc17872f5
SHA1

9447e6a64c21b2eb9521a6451c2ff79236b40bc9
SHA256

bc50b330945167b58393734135ed2c0ccbbfe7fe6ae71a732ee650fec8ccffaa
SHA512

9f49a869de8ef5d8d63f5d78001ac338519bb8c15ff9af51854ea15f5ef4c4672f931e9131890903e3c34e6de4f2942899f23bed8e4f5ad1ee86bffa1279b906
SSDEEP

6144:8qwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnrH:OO1xm+QoK0t4K3gCTDYWGrYzt+NSTL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79a84052a7b3d34775a1853bc17872f5

Files

79a84052a7b3d34775a1853bc17872f5
.exe windows:4 windows x86 arch:x86

5503e9956c1af273083e95a462a8b1f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
CreateThread
HeapCreate
LocalFree
Sleep
CreateFileA
GetDateFormatA
ResetEvent
LoadLibraryW
FindVolumeClose
SetLastError
GetTickCount
GetComputerNameA
GetModuleHandleA
GetSystemTime
GetDiskFreeSpaceA
CloseHandle
UnmapViewOfFile
LocalUnlock
lstrlenA

user32

FillRect
GetDC
GetDlgItem
GetComboBoxInfo
DrawEdge
SetFocus
IsWindow
CreateWindowExA
CallWindowProcA
CheckRadioButton
DrawStateA
DispatchMessageA
DrawMenuBar

advapi32

FreeSid
RegCloseKey
RegDeleteKeyA
IsTokenUntrusted
RegEnumValueA

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ