79302794a16f86025fd581fc053cf3af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79302794a16f86025fd581fc053cf3af
Size

484KB
MD5

79302794a16f86025fd581fc053cf3af
SHA1

70f35bb4c96abef48b0fbcd351ceaaafb0793408
SHA256

5b181b301b07d3edfc637a6be14915f045b99e75c43a466cb2e363ab90bc99db
SHA512

342ef8a0bea9220769a8be30a70b4043a66b22d580b7d56fdd379f14edce3350465f0387e85591a6d1770279a17232162fab85785b00b32eeb2d7aef6bdb6562
SSDEEP

12288:uD/jglkLwUTDBxjz26Lytri2WJIMdrrl5d1s1:uPglkjXBxjz1LCEdrrlhs1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79302794a16f86025fd581fc053cf3af

Files

79302794a16f86025fd581fc053cf3af
.exe windows:4 windows x86 arch:x86

c9b0aa4b48b7e5fa8dcf834f6e804c18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetAclInformation

ntdll

RtlGetCurrentPeb

user32

GetInputDesktop
GetMessageExtraInfo

Sections

.text
Size: 476KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE