78ad605bbbdadf670e12a3d1e5a27995fc3704ff9c7ff279ec70d4af9c495335 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78ad605bbbdadf670e12a3d1e5a27995fc3704ff9c7ff279ec70d4af9c495335
Size

900KB
MD5

d9bf20c3c66e9dc828677b9f600e80b8
SHA1

8d8cb1f41b346088539e37f83bd42475811f9da5
SHA256

78ad605bbbdadf670e12a3d1e5a27995fc3704ff9c7ff279ec70d4af9c495335
SHA512

88ab58d80fd93fb44b2a425cf8685dd44a50352bbe68a446c171d4911731f55440c37f6b37e3dddadbb163fc1f2fd9367921161ab73371bf30705c4b889fa9f0
SSDEEP

12288:Bhjkib7JCS7m4K8cmnK3Pu6yLoiBE9j2ApbZvIRhVhrtu6g8ZMs:bjL8S7dcmKmeLd2C2n528us

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78ad605bbbdadf670e12a3d1e5a27995fc3704ff9c7ff279ec70d4af9c495335

Files

78ad605bbbdadf670e12a3d1e5a27995fc3704ff9c7ff279ec70d4af9c495335
.exe windows:6 windows x86 arch:x86

2388fee6ad8ce4f4a35dbaf64e2da01a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

EnumDisplayDevicesA

advapi32

CredEnumerateA

comctl32

PropertySheet

Sections

Size: - Virtual size: 1.3MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE