78d9add0505bf5d4773b7d2daf3c0004 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78d9add0505bf5d4773b7d2daf3c0004
Size

100KB
MD5

78d9add0505bf5d4773b7d2daf3c0004
SHA1

532fca5c40dd60e11651019d260e6be45007fe3a
SHA256

35c3c687aec77085b2ed440c14174dc4ad3d75c90c7a27054c16435bd980d7bc
SHA512

3028d8eb8ac0caedd07a12535a8d41042170e1216b5604090ebc965c7f29d65d370d3e52c95dce787b57ed009dfb886b45dbaaad443ef3877d9a0acebd54daf1
SSDEEP

1536:jybowYs5JysOLKXA6bajDDO6waW4OZLL4HCGjAhRcplvVdVUX:HwYEJfOvH66aZi8PcpxV3UX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78d9add0505bf5d4773b7d2daf3c0004

Files

78d9add0505bf5d4773b7d2daf3c0004
.exe windows:4 windows x86 arch:x86

a0cc8051efa9c88aacbf2868a1871433

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

FlushConsoleInputBuffer
LocalHandle
SetThreadPriority
FindResourceExA
GetModuleFileNameA
SetProcessAffinityMask
SetCommMask
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ