79[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79.exe
Size

5.7MB
MD5

79ecffc48f78db8cb09588633d8f70a6
SHA1

bebe609c4157cb44fee9dc0b7943e4ace3dbe9fe
SHA256

c6a38d59ddb9c8e147ae347676ccdcb255f5141a837a733c4ff06a28453123e9
SHA512

aee8049bc4cdfe56f87691df6cbc997dc88948fa154df56b7c0e62f32abc7c79052cca0f5350a4afd353e9ace7f31b209ae0b32991ae9c1f57d5fb5d8fc7bdb0
SSDEEP

49152:tfgg4d2evm1spckG6cmZ5Qf/LFmdBIqvnWuoYvnmFxUnb88ikdIrZRMfqNIrZlVo:tITcevmWpcr6cqZdy8lnMqXikxyr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79.exe

Files

79.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ