78575b271bad180562e4dc8df3d8e69b | Triage

Sharing

General

Target

78575b271bad180562e4dc8df3d8e69b
Size

50KB
MD5

78575b271bad180562e4dc8df3d8e69b
SHA1

aa7af53dcd73b069fd22493e98682fb38e4bb817
SHA256

6441f69c1d2d0a56ce6fdd8c65b8fe26d9f1c88bb9f77b07f567fcc4978d3683
SHA512

58a1e438d87e5a9f3e8d3f9f2b5adb81fc931af6ed1dc579f1c164381f1c30d294372b67d95019c59f01338eb4bd706bbb04841ef95a36d8ea971b8ce589ecbf
SSDEEP

768:Q2nugY9n0QsIqIU6EoBAbbR547bFV5eMZUSY2AsQN1UeVdGP1jRkVQ8oyk2:Q8pqTZqIU6ESAZ5Q82ARQ1iVQ8oz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78575b271bad180562e4dc8df3d8e69b

Files

78575b271bad180562e4dc8df3d8e69b
.exe windows:5 windows x86 arch:x86

31159139efa8901d220ccdeba120e2f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW

shlwapi

PathCombineW
PathFindFileNameW
PathMatchSpecW
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfA
wvnsprintfW

user32

CharUpperW
EndDialog
GetClassNameA
GetCursorPos
GetDlgItemTextA
GetWindowLongA
GetWindowTextA
OpenDesktopA
PeekMessageA
SendMessageA
SetProcessWindowStation
ToUnicode

Sections

.nkb
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xezad
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lilat
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ