780c5940b651ad74b4374f64947b04e4dc23b82e9263de5fa9c52d7c68023730 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

780c5940b651ad74b4374f64947b04e4dc23b82e9263de5fa9c52d7c68023730
Size

63KB
MD5

7bb3ea1c68d219b2659128316b116e39
SHA1

d6cc1c1d328686270eaf4f9d94719f73447483fb
SHA256

780c5940b651ad74b4374f64947b04e4dc23b82e9263de5fa9c52d7c68023730
SHA512

b9f3419e1cbc2d7a790649a3d76e82a023b831097aeaf76f4b0abbfa15be73d1469be014d6587d609f2520e219fdfdbdb3d256c4a210bd4220c8c2951080334c
SSDEEP

1536:U9Fca6ALKlCkoIVTLcDg0GYIeOTF1WfSeUlqOhfBQ91H:0RmnoIJLU1GfTTw8qOhK91H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
780c5940b651ad74b4374f64947b04e4dc23b82e9263de5fa9c52d7c68023730

Files

780c5940b651ad74b4374f64947b04e4dc23b82e9263de5fa9c52d7c68023730
.exe windows:4 windows x86 arch:x86

14ccb89b90c5577aefe390a228345347

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TryEnterCriticalSection
RegNotifyChangeKeyValue
Module32Next
VirtualFree
DefineDosDeviceA
GetCurrentPackageInfo
QueryFullProcessImageNameW
OpenEventW
SetCommState
HeapCompact
RegCreateKeyExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE