c78cb1c85b4465b64cba711a221f0093 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c78cb1c85b4465b64cba711a221f0093
Size

48KB
MD5

c78cb1c85b4465b64cba711a221f0093
SHA1

e18af1608c7d7a931f3183a4854ca73ea889ad06
SHA256

dffbde12b88cf882baca5e325dff990115f1e8ac288381889872b7e312a5e285
SHA512

a12e681377bdfcd7e5d9f220c90352045019e089c7d14b2112b1e233ba1c0dcd3c84c33abc231312ad4e8e34ca9cf654435d7d6f6eddeaf06a0026ac95063f7d
SSDEEP

1536:Serhz0CImyR2b+84Vy7nN3fM1Zab5UR5H:FrCR84wBfiC5UR5H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78cb1c85b4465b64cba711a221f0093

Files

c78cb1c85b4465b64cba711a221f0093
.exe windows:5 windows x86 arch:x86

d1a84c641d39f2cdacbf9303646a4842

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptReleaseContext
RegCloseKey
CryptGetHashParam
DuplicateTokenEx
CryptCreateHash
RegDeleteValueA
RegQueryValueExA

shlwapi

SHDeleteKeyA
PathFindFileNameW
wvnsprintfW
StrStrW
StrCmpNIW
PathRemoveFileSpecW
PathFileExistsW
PathCombineW
wnsprintfW
StrCmpNIA
PathMatchSpecW
wnsprintfA
wvnsprintfA

Sections

.lgj
Size: 39KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ulib
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tktwr
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ