c79c151c0e02a54c8f7cbe95e75d64c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c79c151c0e02a54c8f7cbe95e75d64c1
Size

21KB
MD5

c79c151c0e02a54c8f7cbe95e75d64c1
SHA1

639732146b009b8ae7a8d5e738041d6c590bf224
SHA256

5fe6e8f9e1485e7281f73263647e276c36ccf1a9c3ae327095f4eb92508a9ab5
SHA512

6925ff14d56b59a96f007af8da56d87ea19cc0603421864cba51aa37573d9089c7d84aefcf5f5b8168052a6edcfe0431b10356eb1bb72d92c6e1f6c952e5a9b4
SSDEEP

384:xpZKYVJ4ogLElyDauo1NWAnlobVGg4vvEO+Ulz5E4fTTlp0SI:dJVCR56hoU8/Ul1q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c79c151c0e02a54c8f7cbe95e75d64c1

Files

c79c151c0e02a54c8f7cbe95e75d64c1
.exe windows:4 windows x86 arch:x86

19a04eee4c8ba40dcc4cf5aea52f939e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetCurrentThread
GetProcAddress
GetThreadContext
HeapAlloc
HeapCreate
HeapDestroy
ResumeThread
SetThreadContext
Sleep
SuspendThread
VirtualAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ