79287a8a28e9cb57eb50e65bb4f26577 | Triage

Sharing

General

Target

79287a8a28e9cb57eb50e65bb4f26577
Size

83KB
MD5

79287a8a28e9cb57eb50e65bb4f26577
SHA1

1cf1e722e84af72ec889ae0040b0ce5b6c780f37
SHA256

55f839bd05eef7612c24c9203d1d759d3a7cde88c58e63a1a606b50bbc05df7f
SHA512

17d06239f534cb722630f089e63fc6dad2fb6effd2f2861b004d02feec0c741002e94622ab3abb3206a98dde0927e5f1f4466006be3e299f943c1d531b3d66e2
SSDEEP

1536:VMMMMMmOTVxur9KFxVI5VsrCDea9lHWbb7IIKpwjEErxTWDTMqhGKYIZTET8mpL:c8r5HDXlHm/KqjBkMqhGKZTbm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79287a8a28e9cb57eb50e65bb4f26577

Files

79287a8a28e9cb57eb50e65bb4f26577
.exe windows:4 windows x86 arch:x86

99a5077c02880dca4a51e3d872ce313b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameA
WriteConsoleW
GetCommandLineA
GetNumaHighestNodeNumber
GetProcessHandleCount
lstrcpyn
GenerateConsoleCtrlEvent
SwitchToFiber
VDMConsoleOperation
EraseTape
WriteConsoleA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE