0788b1fdfc19097b57df85013eb68413 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0788b1fdfc19097b57df85013eb68413
Size

61KB
MD5

0788b1fdfc19097b57df85013eb68413
SHA1

8bb1217f6bc496e5f1acc2edd5aa8c07eac0fe9d
SHA256

b2d5820b2d985b0c27b2a88545ff5b6c3fd8e3f5878c6456e20385921f0c9b79
SHA512

9c9335adbc973b0533688fec087f7dcc4f73afb9fb9993ec48666280e650525cacc4ea26ea748f8c8156a708b3a144f815b4a1cd5f7c690cc0e513ceaf56fe05
SSDEEP

1536:Om7wjsVTJ+p3JrkGLawHE/E2j+ENmYJgU9BNtVhX4hFISo:p+sVT45mn/bjnNqU9B5ZQFISo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0788b1fdfc19097b57df85013eb68413

Files

0788b1fdfc19097b57df85013eb68413
.exe windows:4 windows x86 arch:x86

22423eb3058af0ae47f08ce450d03f43

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

Sections

.text
Size: 56KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAvJlY10
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mumaba
Size: 62B - Virtual size: 62B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE