79a57ce148b175c66f602bac39a54994 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79a57ce148b175c66f602bac39a54994
Size

19KB
MD5

79a57ce148b175c66f602bac39a54994
SHA1

3a065ffbb76f8388e946096e907a0b3f74ebe1e0
SHA256

51e375caf03b4ffe67619945d6bde2b6a61c6c00f8b5dad0fbc19e2cf00c5d41
SHA512

53136af79e1e9859b8a4073f136064bbfb375a21ed9945dffe9ad4d4fb651800ca2c1b266dc5e581fab9f82dc360d7d19dd03998c92a9aa6499af1e343367a48
SSDEEP

384:583ORogkgUgNCf+almJ3xF7oMK+ICi09hUL2hIsqpmNAZrVoQ0itN:5AJgUACfroxXoMK+7O2HomNAZr2Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79a57ce148b175c66f602bac39a54994

Files

79a57ce148b175c66f602bac39a54994
.exe windows:4 windows x86 arch:x86

6785969b4784e4c84bca5dc94af9d926

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcess
GetEnvironmentVariableA
GetFileTime
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
FindResourceA
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
MoveFileExA
OpenFile
SetFileTime
SizeofResource
WriteFile
ExitProcess
CreateFileA
GetVersionExA
CloseHandle

user32

wsprintfA
MessageBoxA

advapi32

RegCloseKey
RegDeleteKeyA
RegCreateKeyExA

msvcrt

_wfopen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ