b78504fa227406e27e7db3259dbb51bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b78504fa227406e27e7db3259dbb51bc
Size

216KB
MD5

b78504fa227406e27e7db3259dbb51bc
SHA1

5191ef3c3cde6afef4920577b4777204c5a6ffaa
SHA256

75fb6cf2d3e0489276fb70d1e67d56615d739de3f9bdf787f0324333f4c7fbd6
SHA512

4ff0483426b76513a5763569388dcd43f6e451d3d0374b3e06b2128d500266f3775ad8fcf021b1a2183d3d09455dffe4a95546fe6c9c28673651d695bf8c864a
SSDEEP

3072:DdNbMJwVruvgpOadDXmORDOU0I1erU5m4mITRGunkUYEre7xPgpwi84FquAA+yb9:XVru67dDXhF11erUIITznNBSi84Kr8V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b78504fa227406e27e7db3259dbb51bc

Files

b78504fa227406e27e7db3259dbb51bc
.dll windows:4 windows x86 arch:x86

7c2c32bf67f3f93191223cc710f14f69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

advapi32

LookupPrivilegeValueA

ole32

CoCreateInstance

oleaut32

VariantClear

wininet

InternetCloseHandle

iphlpapi

GetAdaptersInfo

Exports

Exports

func

Sections

.text
Size: 198KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE