79cf359faf2a8adecbccfbc989527072 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79cf359faf2a8adecbccfbc989527072
Size

120KB
MD5

79cf359faf2a8adecbccfbc989527072
SHA1

aff7fdc9595677ac0da90665eda6f40cc21dc929
SHA256

36b0c6b42c9aeb418356e7d56633fb1d08f6d9b1eaaed0b3b728dd7ea55a0f91
SHA512

3f7747cd7eea57e32cfc1e5fa29042264d31b55c58f6799a2ae4074a989b73da7b489e717ca030fc12e60a8f9139f81f2361d421a67cce49784c5817137199f3
SSDEEP

1536:JnLxwiaUszD/BFaokYyDdPO8lLrUtxXFjsA5vfTEH7Rl0yZ0Zy7kWSQdSxgWXcn:JnLxwiK3Bjy5Olx5sr7/0wxkWSQGcn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79cf359faf2a8adecbccfbc989527072

Files

79cf359faf2a8adecbccfbc989527072
.exe windows:4 windows x86 arch:x86

eb6dbf9f4761a6734f45f13ae283b4d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
CreateTimerQueueTimer
GetStringTypeA
DeleteVolumeMountPointA
RegisterConsoleVDM
AddAtomA
SetConsoleKeyShortcuts
GlobalFix
InterlockedExchangeAdd
GetConsoleNlsMode
NlsGetCacheUpdateCount
GetCommandLineA
ExitProcess
GetStartupInfoA
CreateFileA
RtlUnwind
GetShortPathNameA
GetConsoleNlsMode
GetConsoleAliasesA
FreeEnvironmentStringsA
GetProfileStringA
ResumeThread
CreateMutexA
ExpandEnvironmentStringsA
CreateFileMappingA
InitAtomTable

Sections

atsec0
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

atsec1
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

atsec2
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ