978505f1c8a541e9f2a0e6ded89c7744 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

978505f1c8a541e9f2a0e6ded89c7744
Size

35KB
MD5

978505f1c8a541e9f2a0e6ded89c7744
SHA1

7e0a42e1dd8ed9f68d12e2ee29c01e215632aa97
SHA256

77ee365ae8b742b82b35e2626d0612962a72e18c564786dd62c4671d1565ab4b
SHA512

b13cfabe19f440ce6e4f7661c3ae765c7e4f35f0796284557bc100524f21fd9da067ad9bddbe8e8a13dabda6c240524017d0ebd7692480a1522cb96558a38eed
SSDEEP

384:GVwaWlvVn2dAaJLjRZvQ6kRiKBzM1IJ5XdOTSJPb7piAKE54c2nwbVWFtGZsZjJP:GKaavVn2pJLjRZvqBzAIJFoT2V3b2gBw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
978505f1c8a541e9f2a0e6ded89c7744

Files

978505f1c8a541e9f2a0e6ded89c7744
.exe windows:4 windows x86 arch:x86

922d0e480eb26d121aa5489421783b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetForegroundWindow
InvalidateRect
ScreenToClient
UpdateWindow

kernel32

ExitProcess
FindClose
GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.itext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 19KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE