c79dc35dff65874a4505932812cddac4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c79dc35dff65874a4505932812cddac4
Size

103KB
MD5

c79dc35dff65874a4505932812cddac4
SHA1

e7de74d9929b570a8c9db96107500c70539cc1c7
SHA256

448adce23133be8ad344b8906ef3fbbee78c99df4a118ab5cea2e41240c6a864
SHA512

ed23f3886ac97cbc0698c9e4532cae3dae09b03d6f3915f29b067d1236a2ff5c10bb464a48629ff7a1844cd659225018fcc900358ce2ce6855da68b67cc792fb
SSDEEP

1536:BZ/nEkh8OTKNvjNZzWgRtCx+5KyPKLTM7Bl4ZUpvLnrsv5tqWb/L:fxhTKNLNZl6x+cKKLTM774WpLrsvlTL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c79dc35dff65874a4505932812cddac4

Files

c79dc35dff65874a4505932812cddac4
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE