c78a8e157f7ad5a283ef61c0f9f70a2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c78a8e157f7ad5a283ef61c0f9f70a2d
Size

3.0MB
MD5

c78a8e157f7ad5a283ef61c0f9f70a2d
SHA1

21633cb85acaa8d766ce089b51d03ccd9bab64d6
SHA256

6bad6d4fc4b63ef991a47bd5d23d9770c1e1ad0fa66e1c43e71843ae3a2946bf
SHA512

04197ce41a5a05d056ca56c0614684a254502125ace73a1c2f020da5fab986bb49d53f42ebd3f7244a885380966ab22daf66f5a05ff1c1c8410cb72b970c781c
SSDEEP

49152:DDXWGzJCNC6KLm6R5U0rUXfTrOQCit/8Kb1aBjRkOIVkOtxK6YQWMPmwr5zXmUn6:DbP+CtReZTyvqHBaBjRkOIVFK6Y0Pmws

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78a8e157f7ad5a283ef61c0f9f70a2d

Files

c78a8e157f7ad5a283ef61c0f9f70a2d
.exe windows:4 windows x86 arch:x86

b86cf5ffb2bcd9cd06d59b287065b137

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 2.9MB - Virtual size: 15.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE