78c5ec06fe51009fb15546f284226391 | Triage

Sharing

General

Target

78c5ec06fe51009fb15546f284226391
Size

180KB
MD5

78c5ec06fe51009fb15546f284226391
SHA1

b6f8a9ba7ec88203e681fd67c9290e6f6e2ad111
SHA256

f0021956fadc8b903f48a6aafee2c682edf6ee901adc59ba2c0509f7d43bfcb7
SHA512

da18c11914eae8669bc60380715757a05a6eb561dd64e1a14c641b7ef18cf666cce8a05e8767ea104a9902e02fa50810dfb27e6bc70da4c63e07ce30f880b629
SSDEEP

3072:UmklVTA7og/XISeacp6kO34s2+jXpS6rMjpf8sVJJSL8:UmyT0APO35/jXpS6ojBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78c5ec06fe51009fb15546f284226391

Files

78c5ec06fe51009fb15546f284226391
.exe windows:4 windows x86 arch:x86

0e346f3867ea2ee33e79a50c0e3c1655

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

MkParseDisplayName
StringFromIID
CoGetContextToken
CoCreateGuid
CoCreateInstanceEx
CreateOleAdviseHolder
CLSIDFromProgID
StgOpenStorage

user32

GetActiveWindow
MessageBoxA
GetFocus

kernel32

GetCPInfo
GetFullPathNameA
GetCommandLineA
VirtualAllocEx
GetVersion
lstrcmpA
GetLastError
lstrlenA
VirtualAlloc
LoadLibraryA
GetProcAddress
lstrcpynA
ExitProcess
GetVersionExA
GlobalAlloc
ExitThread
GetModuleHandleA
LocalAlloc
LoadLibraryExA

comdlg32

FindTextA
GetOpenFileNameA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ