78a336ca6b7ffc46670b8554a50d61e1 | Triage

Sharing

General

Target

78a336ca6b7ffc46670b8554a50d61e1
Size

46KB
MD5

78a336ca6b7ffc46670b8554a50d61e1
SHA1

5adc417aeba376fa9822bb0dea5c11c7b52c519e
SHA256

a92c8cc2cdc726a4cf804c2ca840af03768eae9b2026ff16f7b9dec571cdf5bb
SHA512

ab7c23e4cd0a07e6857ef30e59e8c85fe8129125c91e5b6d29b4227d54a066f94a0ae17eb2bda151fff1b648262bb09b7527bc9b57349637dfe3dc1aa00433fc
SSDEEP

768:dzq3BV+t4oLcHlRS146UAywHBl/xAECpueqR4I8dlDqPz7vvpZks3tsJca6QX58u:Jqxqml0GUzpAppuIjlyz73pnd4r+P52f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78a336ca6b7ffc46670b8554a50d61e1

Files

78a336ca6b7ffc46670b8554a50d61e1
.exe windows:5 windows x86 arch:x86

07215e22c8722908c82376ed4a51cc76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrW
PathMatchSpecW
PathFileExistsW
wvnsprintfW
SHDeleteKeyA
StrCmpNIA
PathRemoveFileSpecW
PathFindFileNameW
PathCombineW
wvnsprintfA
wnsprintfA
StrCmpNIW
wnsprintfW

advapi32

RegDeleteValueA
RegQueryValueExA
RegCloseKey
DuplicateTokenEx
CryptCreateHash
CryptGetHashParam
CryptReleaseContext

Sections

.fmp
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nadyh
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ozqfyp
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ