787c91a8f0fc000ecd0f23dd23665d3c | Triage

Sharing

General

Target

787c91a8f0fc000ecd0f23dd23665d3c
Size

372KB
MD5

787c91a8f0fc000ecd0f23dd23665d3c
SHA1

ba92895bb109de0b494028049cdf7de7252c8131
SHA256

5a226a946c3d6ad0e0f08d49920434af3bafbe00ceed480c89ca1e82ef273d2b
SHA512

c7477a09993a7bb29d3843b1104296200fe42bf987d286bdf0d2b9c76385e3d6b231e03fa78e798cd27bb1d804c18264c87d27ca14ceadd21dab6407e069eaa5
SSDEEP

6144:uN8TRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:vneF8m4ewS/HcF+ih7wp10l1h+TxqM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
787c91a8f0fc000ecd0f23dd23665d3c

Files

787c91a8f0fc000ecd0f23dd23665d3c
.exe windows:4 windows x86 arch:x86

79aed5c0d5548b0c8b62e64cf054ec23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
GetTickCount
GetModuleHandleW
ReadFile
GlobalFree
GlobalSize
ExitThread
GetExitCodeProcess
VirtualAlloc
FindVolumeClose
CreateFileA
FreeConsole
LocalFree
SetEvent
GetPrivateProfileIntW
lstrlenA
GetDriveTypeA
GetLocalTime
CloseHandle
GetComputerNameW

user32

GetKeyState
GetClientRect
CallWindowProcA
FillRect
GetMenu
EndDialog
DispatchMessageA
DrawStateW
CreateWindowExA
GetDlgItem
GetCaretPos
GetClassInfoA
GetCursorInfo

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
ComPlusMigrate

msexch40

DllUnregisterServer

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ