78aab737eb75858ec9ed578ce16d2b50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78aab737eb75858ec9ed578ce16d2b50
Size

19KB
MD5

78aab737eb75858ec9ed578ce16d2b50
SHA1

adce0f54ac471f9cac234a050ead96ec32f5c0ec
SHA256

77e071bd8b98efda1838418895bc3243eabb05312b3602b27fe7dccf10278b5e
SHA512

0af04e2e503dec45037575b3f3314e82199038e297d89a3a578cbf452687eabf367f7c0e5c3c1a70ea8c4c675f483eae273774f161caad034b31945a40711b50
SSDEEP

384:rmqSiKWmznV3tjj54ZeWkiBUCrNrHva0+eO2LO22gFHT:rmqnKnV35ugfiBVrBS0xh2oH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78aab737eb75858ec9ed578ce16d2b50

Files

78aab737eb75858ec9ed578ce16d2b50
.exe windows:4 windows x86 arch:x86

7fbf1c4a6313c40928162971852d5bb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
ExitProcess
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProfileIntA
GlobalDeleteAtom
LoadLibraryA
ReadConsoleInputA
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnlockFileEx
VerifyVersionInfoA
WinExec
_lopen
_lread
lstrcpyA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_expand
_iob
_onexit
_setmode
atexit
realloc
signal

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 92B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE