78bbedded5d2b6e1cee7b35c0dc3ede0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78bbedded5d2b6e1cee7b35c0dc3ede0
Size

138KB
MD5

78bbedded5d2b6e1cee7b35c0dc3ede0
SHA1

b3c46be152693689723da2b390532a2212ff9f75
SHA256

326a5e31eba6fed115cb7bec0292f685d73222dba764dcb70b96ac82767912fd
SHA512

ad7830ce9e668b0097f3cc5c60fb81dddc2b18ce28a04789bc477261bd9801b8d9d06d77c73f02292fd8fa1878e3ab6ce00de11e2fe2f71a385e94dc55468c6a
SSDEEP

3072:sl52RvlWjWiSRVO6DU2abLcVWcWX241NyBxLgtlQc4llY4e2:sL2V0SDO8U28cVWr24jyAtlB6lYr2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78bbedded5d2b6e1cee7b35c0dc3ede0

Files

78bbedded5d2b6e1cee7b35c0dc3ede0
.exe windows:4 windows x86 arch:x86

8f9e075bce13dfd85b229c1f848b9bd8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

ole32

CoUninitialize

shell32

ShellExecuteA

wininet

InternetGetConnectedState

wsock32

WSACleanup

urlmon

URLDownloadToFileA

iphlpapi

GetNetworkParams

Sections

CODE
Size: 128KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE