781091acae7aff91496b9777ae6969b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

781091acae7aff91496b9777ae6969b0
Size

58KB
MD5

781091acae7aff91496b9777ae6969b0
SHA1

ad4c3322ca8375d643173e66372369a456450c0a
SHA256

fb06844aa08608f95b112861e998dca3cb7ddbbf46a24a26a3b57da35d957d41
SHA512

194bbfad32284c9ab238bc8fd39b17d421bc2ac3856cc6819f6914f00c4e578f5b464d8e40de95ecc6e2b4599a2588da7f2bd125e261b1b67f0b5a5ffa88056f
SSDEEP

768:2Zfo8DbFEorKIPmEmINmmWL7+BQv2D0LvXwkjfNFT/r3UABbQvk8Pp/iGPF5Na7Y:MfoLo7ZmbOCW6Lxr7B8UGTN+ax

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
781091acae7aff91496b9777ae6969b0

Files

781091acae7aff91496b9777ae6969b0
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE