79cd178a9786944fd556697cfda695b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79cd178a9786944fd556697cfda695b3
Size

1.2MB
MD5

79cd178a9786944fd556697cfda695b3
SHA1

c60dd39498c90fe0e1973ef0ba009d56e6d9e329
SHA256

57be9497963579a1456cdfa00eb97a4ac38db933f64962262fd1c3a4e438b747
SHA512

86bfbf5b70d7496cad16513f416d51fb836d0472f2c0dd7977c3953c9e0e27d40a5b779c0d1530dd29e75313316d09740198781a537222121a23817247b7e2c8
SSDEEP

12288:HcJ9PxcFmGT+odXcM0N/t2p2kmKdF7PywsBeLQztw:c9POFTT+xhNuZHdF7KwsBeLQztw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79cd178a9786944fd556697cfda695b3

Files

79cd178a9786944fd556697cfda695b3
.exe windows:4 windows x86 arch:x86

a806f41b78e1c87009db62fd7933a102

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

user32

DdePostAdvise
CascadeWindows
ClientToScreen

Sections

.text
Size: 234KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 848KB - Virtual size: 848KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE