786c835cb85c7e434b11fc70fc107af6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

786c835cb85c7e434b11fc70fc107af6
Size

76KB
MD5

786c835cb85c7e434b11fc70fc107af6
SHA1

faa01b9ce9283de26f6a894a52a53c17b4d6372e
SHA256

a91d935cdbb5e8182c30b8cd2266fa168dbb924ee28c4dde5faa30e69510f602
SHA512

7a3721edefe764c75ff5af84bcd3d81a3e955d2e092e02d7b4dffcbd8ef516bb815b294f8321ac08126b430e2ec61e2641f54841e17ad644635b82e6c46623a9
SSDEEP

1536:cDaLHCY9DSqtWNy4muPDF7MZb4dqanvfVMgiy9MQOSvnscjpjVrs2ryrd1vUQuq6:cDO9mMWw4vPZ2b4/WM7vnscjHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
786c835cb85c7e434b11fc70fc107af6

Files

786c835cb85c7e434b11fc70fc107af6
.exe windows:4 windows x86 arch:x86

c3b7a0ce630155b9b90e15c7927a37ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
GetNamedPipeHandleStateW
QueryDosDeviceW
DnsHostnameToComputerNameA
InitializeCriticalSection
VerifyConsoleIoHandle
GetVolumePathNameW
SetCommMask
RemoveDirectoryA
GetStdHandle
SetConsoleOutputCP

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE