78eab39b02fe1d3d1bc75b36db66ef0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78eab39b02fe1d3d1bc75b36db66ef0a
Size

71KB
MD5

78eab39b02fe1d3d1bc75b36db66ef0a
SHA1

0f3d42a70a54963c11206c565ac3447763355456
SHA256

9232183a2e5b9289a0a22e98e0fc4e4b0ac132ae6dc148458de69472cf15b912
SHA512

68ce7aaab87fc12002c379ab3d26197dbfaa30f075fc7e04c5c19dfcee2082fff9cb9224b7f73fb515eaf351d310d0cc79090ab4005468b6e03d59046ac497de
SSDEEP

1536:67cqq9g2Y1A3I4H517adPfEiwb8G8JmO/wfur4raXqf9AAPlhGT8p6:/g2Ya3I4nafC83ofur6Me93lh3A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78eab39b02fe1d3d1bc75b36db66ef0a

Files

78eab39b02fe1d3d1bc75b36db66ef0a
.exe windows:5 windows x86 arch:x86

5bdc41c6e791e5dfadb53454999bd37c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA

user32

RegisterClassA
LoadIconW

shlwapi

StrCmpNIW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DER
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ