78cfc50a559db99089d0934f278dc779 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78cfc50a559db99089d0934f278dc779
Size

111KB
MD5

78cfc50a559db99089d0934f278dc779
SHA1

f4ca0c8dae131ce98df74eb1f7bf55b74eec696e
SHA256

24cdf6b48176038ed43f762c4d9e8f43d702a9fb9011f9e1c2b9739cdbb3e97d
SHA512

277ea84d89c2bb3134d943991370c1458e152e828874024f6e0a946c836cd4643f2a41759e3e9dbe3693670f6559b793e9d17b39843a52fe014a654ee44b72ff
SSDEEP

3072:4F9RyWkLoBGc56QFgG+cxAKMiZPz2fxgIN2Z4PXj:45OLoB/56Qx4oSfL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78cfc50a559db99089d0934f278dc779

Files

78cfc50a559db99089d0934f278dc779
.exe windows:4 windows x86 arch:x86

97c1770361601ced061f0fcd8b2d5982

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

StretchBlt
SetICMMode
SetRelAbs
ResetDCW
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRStrIW
SHAppBarMessage

kernel32

ExitProcess
TerminateProcess

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE