78b0955bf1724fdf013538c122e8592a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78b0955bf1724fdf013538c122e8592a
Size

151KB
MD5

78b0955bf1724fdf013538c122e8592a
SHA1

a29b958737992af246b6e857f8be05ff426fc30f
SHA256

51d77ff50c787a3758b40f91c372a8c850a3a176e9ad2f3a5b06fd89bcec0a4a
SHA512

7a7ace199fdb7dc6de91b70d8afd68ebec70ea69a80fd74d7f199c088d1f1afc202f48fae1c24c1f409510d49f253cd7af2fc09aabe5d33ea6c68db23c87035b
SSDEEP

1536:OYvsDjDgarjxMx6ylM+9xbOUuUg64qIxhmcuudTw+jNfpTrFcAPpDs7/eeumv6tU:OUKgOs6p+KTxhVuu9pTDm7Emv3Rfa6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78b0955bf1724fdf013538c122e8592a

Files

78b0955bf1724fdf013538c122e8592a
.exe windows:4 windows x86 arch:x86

89dee2b26dbc963d92f60d65f9ab10b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExA
GetConsoleCursorInfo
GetStartupInfoA
GetConsoleTitleW
FindFirstFileA
GetModuleHandleA
DeleteFileA
ExitThread
SetSystemTime
CreateEventA
FindFirstFileExA
TransactNamedPipe
GetCurrentProcessId

user32

CharUpperBuffA
WinHelpW
AllowSetForegroundWindow
IsWindowUnicode
IsWindowEnabled
GetScrollInfo
MapWindowPoints
EmptyClipboard
DdeConnect
LoadCursorFromFileA
SetShellWindow

msvcrt

_exit
_acmdln
_controlfp
_except_handler3
__p__fmode
exit
__set_app_type
__getmainargs
__p__commode
_initterm
_XcptFilter
_adjust_fdiv
memcpy
__setusermatherr

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ