79f66c86fed49900fd8b5740762c51f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79f66c86fed49900fd8b5740762c51f1
Size

348KB
MD5

79f66c86fed49900fd8b5740762c51f1
SHA1

bb48e35a42ec2e25cfe82b9efd9deb662d04ad39
SHA256

f8252dd699c1bdee0792a76f7878fea9aa7c87e89d05421ae18b9e493d923db4
SHA512

68f816c03e2ad2879aaa17ccd9b107613886b3d95e9c8a361c7a9e8319b7865a0b4f82a0649e7d084d81c8ca14ce88deb7a72fb17f316cca8096244c59318298
SSDEEP

6144:2ESg4L/us6f7vfyOn6AB0qPEz+foBEe8T6R3y11g6BMn4k3sZXrjHhaDigQUq:2Eh4DurbfEDjKoqrzsOi8ZXrjHhQi3Uq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79f66c86fed49900fd8b5740762c51f1

Files

79f66c86fed49900fd8b5740762c51f1
.exe windows:4 windows x86 arch:x86

4d8e9e06f8e51550e3e5089179e9846d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA

Sections

Size: 204KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 29KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE