780e31c4e0a749dde60d9ab6a3ef534d | Triage

Sharing

General

Target

780e31c4e0a749dde60d9ab6a3ef534d
Size

99KB
MD5

780e31c4e0a749dde60d9ab6a3ef534d
SHA1

14ee927d2ce706a71cfc92977abcbbc41d7f3769
SHA256

b0f58ea6865653e3a2e25242911f06559bbb7a3864fdc6e4a08cbc9f575b8479
SHA512

7d88a8e8c62a47c31743e01e3d5cddf41860e1a3826e234d9ecc970b7feb5882eb68692a421bedace34a52f70746ffe6b84c076606080df15cf17b3f5ea45af5
SSDEEP

3072:ke55xzUF4oNzCogqxdwiacjy9nF5YKiUXRq7:F7xUFbWiyZ/h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
780e31c4e0a749dde60d9ab6a3ef534d

Files

780e31c4e0a749dde60d9ab6a3ef534d
.exe windows:4 windows x86 arch:x86

285226c19e30cba9aec39e46cff91207

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetCurrentProcessId
CreateEventA
GetSystemDirectoryA
GetStdHandle
GetCurrentThreadId
LocalFree
GetVersionExA
SleepEx
GetCurrentThread
GetCurrentProcess
VirtualAlloc
GetComputerNameA
CreateMutexA
LocalAlloc
ExitProcess
GetCurrentDirectoryA

advapi32

GetUserNameA

user32

GetActiveWindow
GetForegroundWindow
GetSystemMetrics

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ