778d5290ced64a560ab34a69e56f037a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

778d5290ced64a560ab34a69e56f037a
Size

124KB
MD5

778d5290ced64a560ab34a69e56f037a
SHA1

b2033ccf06a3bd95cad34e966fb38a1451c1c787
SHA256

218a90c8022e4bd3062b2877e46834881db95334ac7d475dfdd48e06bebb0213
SHA512

6b6b92ea8e3a1f29b6a393b4d7d0bf81c8e1f932b15da18cfdad9e7062f22a41fa86a7438e1545fe5464f9865a5b5db1fc6d66497d687ab93abf1a38c712bcc2
SSDEEP

3072:mqnXgM9Yt0rrhmi8X/bfPdX+BmeBi0n98UBFv+CsGfDH:mqnwt0rrMi8LPa98q+Csg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
778d5290ced64a560ab34a69e56f037a

Files

778d5290ced64a560ab34a69e56f037a
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 352KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ