c78c4a9bd5bc8efb153176e689124710 | Triage

Sharing

General

Target

c78c4a9bd5bc8efb153176e689124710
Size

73KB
MD5

c78c4a9bd5bc8efb153176e689124710
SHA1

f715b7e080bd811ba08580a4f72bb7e0c15405dc
SHA256

1d99bde6c6306023b72592a1974725018c85aa49563545ec5de12bf94307efad
SHA512

cc0643f0f47418f73da04dbe2d1803889f202f65217c59c474a6e4135a91522b7b32e5c1f8edf32c65d43c6b9fed5b914820534bfd9c87f70ba00cc1942dfcd3
SSDEEP

1536:NQISLNPMqebbrQR9DK16iiRcK9lmvS4maX93C:NQRLGRrQu8iiRcK2vS4maX5C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78c4a9bd5bc8efb153176e689124710

Files

c78c4a9bd5bc8efb153176e689124710
.exe windows:4 windows x86 arch:x86

ddaa08ec4ae1b0eccc5bd12fd3bb8c20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

UnlockUrlCacheEntryFile
InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
InternetSetDialState
ShowSecurityInfo

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

strlen
_cabs
__wargv

user32

IsCharLowerA
GetWindowDC
LoadImageA
GrayStringA
GetSysColorBrush
HideCaret

Sections

.text
Size: 47KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE