78c8c3ed3b49f42116c7501f36052226 | Triage

Sharing

General

Target

78c8c3ed3b49f42116c7501f36052226
Size

2.5MB
MD5

78c8c3ed3b49f42116c7501f36052226
SHA1

2c149c8db94de089599e465ff808ec86317323c7
SHA256

b5f3c3a9be2816bc5a59b5df6d51ca98c9a9a5d5950ddda0e460616bdfaa9c16
SHA512

5e98a7f8db4a4c566f2e076735dcf065e51e761b287117d16913d51d62de0217c8a4bcaa2418b9e27f932670ca0c745e56bda9d40594679b7515d44cfc9d8d6e
SSDEEP

49152:LG0h3o+RNEK88uVL2vcv4zaqa6F7cHLoJJhSLvUqauhHu8GE2tph9OfUqrj7YmRn:PHKK4SPKHLiWLsqdhHBGEJf33/R9I4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78c8c3ed3b49f42116c7501f36052226

Files

78c8c3ed3b49f42116c7501f36052226
.exe windows:4 windows x86 arch:x86

b6ffb9014d502d1650226318aef9871f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 2.5MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE