79949cd8093e25be59ec8618d4ea9e1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79949cd8093e25be59ec8618d4ea9e1e
Size

24KB
MD5

79949cd8093e25be59ec8618d4ea9e1e
SHA1

ec319ad4e05331b840c04af07de6e07cb278548e
SHA256

bdb11eb92a61d79284ae659b62856cf06dd2f83c6b35ce939c05badd0331176c
SHA512

6c9d1040d285c9cfeef8dd57973180646ddc34726d52627ac215b7ea30ed7abc56b356131c24dc98053a8a50751c84fbafedd1c74080e075450aa09c726c5762
SSDEEP

192:rt0eIgRqg+CHQpmo7EVtS/jzP1oybDe/KQ9Z1:dPIUtc31k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79949cd8093e25be59ec8618d4ea9e1e

Files

79949cd8093e25be59ec8618d4ea9e1e
.exe windows:4 windows x86 arch:x86

3e4843b233497db7026ff02ec1293287

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
MoveFileA
DeleteFileA
CloseHandle
WriteFile
CreateFileA
FreeLibrary
Sleep
GetProcAddress
LoadLibraryA
CreateProcessA
GetModuleHandleA
GetStartupInfoA

msvcrt

_except_handler3
??2@YAPAXI@Z
sprintf
rand
_access
time
__CxxFrameHandler
atol
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
srand
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ