a78fefe0a0e5daca215aeca22118514d0904316803a51034f379250cf0fd469c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a78fefe0a0e5daca215aeca22118514d0904316803a51034f379250cf0fd469c
Size

3.2MB
MD5

0d8ad7a0796169690c35eda8883d2a39
SHA1

6a38c981fa455c41ae59645883466b689e862142
SHA256

a78fefe0a0e5daca215aeca22118514d0904316803a51034f379250cf0fd469c
SHA512

b322935820e62dd93d2fd86aba6b83e19f6aa3c8e2e7cdbd6de53269c74d30f9ac2763474b827701f435172ff3a74994da8e0d6df4e7823d44b7430460bb9f98
SSDEEP

98304:5wI7Wl5Yei1oh49unlO84NBXS4NJTpB6wnU:5wrl5kq49OE8424BDnU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a78fefe0a0e5daca215aeca22118514d0904316803a51034f379250cf0fd469c

Files

a78fefe0a0e5daca215aeca22118514d0904316803a51034f379250cf0fd469c
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB

Sections

.text
Size: 747KB - Virtual size: 746KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

flag_dat
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 488KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ