796091a6700e9882358ad6d59e3c61fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

796091a6700e9882358ad6d59e3c61fa
Size

83KB
MD5

796091a6700e9882358ad6d59e3c61fa
SHA1

eb3b9113afda19cce90a7ee94d541dec501d306e
SHA256

94c42b5504fce6d0bf0d26a420f44abbe9a02b1818de701ac6ca2adc59201305
SHA512

a4b1408bdea2d9d2e8c03025e1f75dfb14e668011bab01ccb563594b180738e318bee276e04157e84a21bcbb21fa2dab2705294cb290487737a6964d2dfb040a
SSDEEP

1536:WBeSuvo1uq22XhE+8rNtsKM5hGI9/Qxjny7cypjEErxTWDTMqhGKYIZTET8bDQ:W9uvBq22++8rX/MGKiwbjBkMqhGKZTbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
796091a6700e9882358ad6d59e3c61fa

Files

796091a6700e9882358ad6d59e3c61fa
.exe windows:4 windows x86 arch:x86

feca35376bfc521a4607bbe12b18f000

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerLanguageNameW
GetFileSize
ReplaceFile
OpenProcess
SetDllDirectoryW
ReadConsoleOutputCharacterA
GetOverlappedResult
SetConsoleKeyShortcuts
PeekConsoleInputW
FindFirstVolumeA
lstrcat

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE