978c7b951b1700054d72009b4d095b39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

978c7b951b1700054d72009b4d095b39
Size

52KB
MD5

978c7b951b1700054d72009b4d095b39
SHA1

2a61f8b5451206c75f6ca5fea130b918c1f8f6a6
SHA256

0d70857cdc56ff6d112a816e3c069bd0a09252dddebbde41a4af6c0ddd834742
SHA512

ad4414ecba430db3d111e14b63faf6a057df68c939095afbc11a64ae37ffb68b140cfabe75104e0e6627bfddea50f8268ba82a44f17c8250471eb9bfccb0c706
SSDEEP

1536:Zszl39s5xT4/4VTgL+6cUgduYXmxM2ZcaGs:Zal3OvThVcLvcsYPk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
978c7b951b1700054d72009b4d095b39

Files

978c7b951b1700054d72009b4d095b39
.exe windows:4 windows x86 arch:x86

00bc7a4e1a630a3e81d20014593aa4ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GlobalAlloc
CreateFileA
ReadFile
CloseHandle
ExitProcess

Sections

.text
Size: 1024B - Virtual size: 598B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE