78cf29a4854429ed125634361f44f18c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78cf29a4854429ed125634361f44f18c
Size

2.0MB
MD5

78cf29a4854429ed125634361f44f18c
SHA1

a6d2b742c59874ef99b90fb096abe4f12940ec98
SHA256

0a0baec3920645fa17286172b2ad4f287db7c1dbc80bc49ce3f68e949faa451e
SHA512

b4e3b6f06946f2e72a59fa67277db989005e1c1dfcd79b6d5795713112c7df91409b663b44c4009998c42a7fc0edf5f9abaaf3a17c1b445b42801ae0dac6e567
SSDEEP

24576:RAQX9BA33HcO/Wc5K5voHf3q/6FRHyfL7gNEKyY75S7tMa0PJinl4PvxM6MLhE0H:/X9GnHLNofVZigZMaEK6Mr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78cf29a4854429ed125634361f44f18c

Files

78cf29a4854429ed125634361f44f18c
.exe windows:4 windows x86 arch:x86

fe5db82acba4930d8b7ddc4dcab540b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pbvm80

ord137

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
GetCPInfo
IsDBCSLeadByte
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetACP
GetOEMCP
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
RtlUnwind
VirtualFree
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
LoadLibraryA
WriteFile
GetStringTypeA
GetStringTypeW
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ