79df45ca9da941dd860ab168ecf4b839 | Triage

Sharing

General

Target

79df45ca9da941dd860ab168ecf4b839
Size

63KB
MD5

79df45ca9da941dd860ab168ecf4b839
SHA1

6cd9837f801ad7007145c22a737067f98711db5f
SHA256

7bf70da1f7ba30793aae60d2d39e1e2f66f952de366f3f93ed54739ee982f71a
SHA512

9be0f4857755a58a131ba687ca62c002e7a22fecca29ae74f4387a3f597f5487598593e4f5eb54497f44affd9b25973d6c99e7091216787c9c4a737cc9c9935d
SSDEEP

768:fCOtknQpo27VMKMSwlUF4d401Ko7SPCJD+vboHkh86Jpcpdz4P6aSFJRs:foEdXzFEX197AD2kyOlyH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79df45ca9da941dd860ab168ecf4b839

Files

79df45ca9da941dd860ab168ecf4b839
.exe windows:5 windows x86 arch:x86

b650d69ba2eb49af97c57821cf08461b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA

user32

LoadIconA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DITAA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ