f78a9599d4b0159f458cd5dbad133ee3 | Triage

Sharing

General

Target

f78a9599d4b0159f458cd5dbad133ee3
Size

148KB
MD5

f78a9599d4b0159f458cd5dbad133ee3
SHA1

cd92f3971130c1fc368e2dee2075a1727a56ba12
SHA256

5c96cf76075e3f4a188eb26513adafaef359294df319c324f90a69f508da525d
SHA512

a859e99f9dfb0baf2fe5a2249276331c7ddc50e6fc312aaca2a9ec1c14cab0fbac81aafa301caecc766f5c165cfa6069d757c29ad71dcf96abec9259c582c350
SSDEEP

1536:Ja8ZSWkojFsO33SpJDTQIKK16LIlBJqZF:TtkAG036tTQIyX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f78a9599d4b0159f458cd5dbad133ee3

Files

f78a9599d4b0159f458cd5dbad133ee3
.exe windows:4 windows x86 arch:x86

9f201bb78f9b0884b643d43ad3f0bd19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memcpy
signal
strlen
strtol

user32

MessageBoxA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 864B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 844B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE