78422b5a6e43b0c80f246fc58e46ea9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78422b5a6e43b0c80f246fc58e46ea9b
Size

76KB
MD5

78422b5a6e43b0c80f246fc58e46ea9b
SHA1

fe14ae1381013701d9b9d02b43e930044a420367
SHA256

1b3f69c3ba54c56fb22bbbb8ed8c3cffa92688107f592f9c4d3e483a7825242e
SHA512

5e75cc86650d512f2c14f8357d502c2d8be418942a9eae373ded00546e9a9fc5a24c6ea95cc917edabc4f6a8c64c19c226ffd9563be8fd7da2216ed549d3f71e
SSDEEP

1536:nHTaF4Hsi9S2xlo8Ua9lQiX6fkVpjVrs2ryrd1vUQuq6:ndsi9S2xlzv9PqoHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78422b5a6e43b0c80f246fc58e46ea9b

Files

78422b5a6e43b0c80f246fc58e46ea9b
.exe windows:4 windows x86 arch:x86

d4c0013fd0540dd1f0baf3defd9c1e1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressW
GetSystemWow64DirectoryA
GetModuleHandleExW
SetInformationJobObject
EnumResourceNamesA
GetNumaAvailableMemory
GetThreadTimes
GetAtomNameW
GetNextVDMCommand
FindActCtxSectionGuid

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE