c780cdc2bdf3f61cfc2287dc772487e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c780cdc2bdf3f61cfc2287dc772487e1
Size

80KB
MD5

c780cdc2bdf3f61cfc2287dc772487e1
SHA1

41e0fccf8c2851f966fe14557603d6e9db624d94
SHA256

3f2ebb98f0a608e24c4dd72d36fe438a2d787b78ceb7a34f74e9ecd55da02c90
SHA512

4bbae59ea93d01e375881622079b8429712e143f4e9495a89b6211ebc33dc19264a5653d328378f23f4332654fd1dfe804d27951e990481f5701af0ad0071cfc
SSDEEP

1536:lMWisGcgizTy9DOqo7KpeUtClqtueNQd0VBCuwmgD82hW8fPL:lMW70B6KcUueNm0VMD8vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c780cdc2bdf3f61cfc2287dc772487e1

Files

c780cdc2bdf3f61cfc2287dc772487e1
.exe windows:4 windows x86 arch:x86

ba71d002b5ac237bdff25ebc9e78f907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockFile
ReadConsoleInputA
SetDefaultCommConfigW
GetUserDefaultLCID
SetConsoleCursorMode
GetUserDefaultUILanguage
SetTapeParameters
Thread32Next
lstrcpy
ExpungeConsoleCommandHistoryW
WriteConsoleOutputAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE