78062aac3c803142b9db6cb8d0e9585a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78062aac3c803142b9db6cb8d0e9585a
Size

66KB
MD5

78062aac3c803142b9db6cb8d0e9585a
SHA1

169a1be082d560850f0cacd2a398838d9592bd91
SHA256

b9624062ff61f5ac446d497f834074ed035f2a510d3d5d4bdc7a1830b68f4389
SHA512

83e936be8e196a6685eaa3035b095be22f259b92752788c560f36f3507a19937ca2b8108b2b88e94a5481394969839311de72ce4125887087c2cc085fa757a6c
SSDEEP

1536:Piul19TjSWFywvK5TpKGBdmdZnbhrWSCIYAw:Pb5WWhITkGCLnbMS5w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78062aac3c803142b9db6cb8d0e9585a

Files

78062aac3c803142b9db6cb8d0e9585a
.exe windows:5 windows x86 arch:x86

f75c3906b0cc7e91e5bacc7c963ecd48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetSystemTime
lstrcpyA
GetTempPathA
GetTickCount
GetVersion
CloseHandle
WriteFile
FindAtomA
CreateFileA
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetLastError
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetLocalTime
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

wsprintfA
InflateRect
GetCursorPos
GetFocus
GetCaretPos
IsWindowVisible
GetWindowRect
ClientToScreen
EqualRect

shlwapi

SHGetValueA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE