789fb1a38c207578c0dec4eabef9f8ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

789fb1a38c207578c0dec4eabef9f8ec
Size

396KB
MD5

789fb1a38c207578c0dec4eabef9f8ec
SHA1

29be14e54ade2c4a1bbdda28fb6acd243f100d64
SHA256

3e830db66116c541caab630935997bd68dca0d03e5cdfada7213d4b010812e00
SHA512

7d3cfd7c09bc407d908c6c193eed09ce0f6a2bf1b4521a36f346704808fe2895ad71aeadfd1da3cc1793faae1d6fbd4a57629268dcc3049ba1a7a068a367039c
SSDEEP

12288:u5BJHYSc0y8GUpYkFY8D5IqtWYgDfHOtw:4g0y8G1X85NtyDfHN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
789fb1a38c207578c0dec4eabef9f8ec

Files

789fb1a38c207578c0dec4eabef9f8ec
.exe windows:4 windows x86 arch:x86

ef6d2a317e5633388d6206e250c0267d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
VirtualAlloc
GetProcAddress
VirtualFree
OpenEventA
GetModuleHandleA
FlushFileBuffers
SetStdHandle
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetLastError
ReadFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle

winmm

mixerOpen

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ