79c8e09f8096b511e134ac37a8116106 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79c8e09f8096b511e134ac37a8116106
Size

184KB
MD5

79c8e09f8096b511e134ac37a8116106
SHA1

d5e708178e459304a1afc33150165269a0bfaf26
SHA256

86d412170b9f2f50da2c0170afed817af8245b1d8622c5a6e200a0afceb9a72f
SHA512

88d657745abca5f92c470ebe3a074cf060901f4849609b5a3d552471da1b456947ebd27166a5de0b15d40ff3f296bf9e4bde6a64832b2f3c0e6fac5660443115
SSDEEP

3072:4yM40B804M/eYE0ejv8Q8kBk51g2kIXIi:L0BzBqjv8v1g/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79c8e09f8096b511e134ac37a8116106

Files

79c8e09f8096b511e134ac37a8116106
.exe windows:4 windows x86 arch:x86

a947a67c7813178cda7dc1771b1c3921

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetThreadLocale
GetCommandLineW
VirtualAllocEx
GetSystemDefaultLangID
GetVersion
LoadLibraryA

user32

GetMenuItemCount
GetMenuItemInfoA
GetMenu
GetFocus
GetMenuItemID
LoadCursorA
GetMenuStringA

Exports

Exports

_8u@4
IDX@20
iR
_V0F
w9
_ZE@12
_E9r
Bb@8

Sections

CODE
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eddata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ