c78e19240700d9c7fe0d77491a35c98283446cfcb212e47fe0ba9b581a17b932 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c78e19240700d9c7fe0d77491a35c98283446cfcb212e47fe0ba9b581a17b932
Size

326KB
MD5

05ca425e6a4fe7d95a45a170778da8a7
SHA1

2206f5890414152abf4780bf8ed20386ba13e71b
SHA256

c78e19240700d9c7fe0d77491a35c98283446cfcb212e47fe0ba9b581a17b932
SHA512

9c7555b0a629af4f90e52e8f339ba29abe44ee33e27d8fd334cb0f65fc8689533c23ce82d5d7d6b2296b07a9732b888c9f934a264319e3a3e1d3161f237229f2
SSDEEP

6144:WuU5m21fwa4YYiJpH3wDkE2YR9UrDuXkqysBQFz+M6PDXvA4G+DhIsEbz1YA+IYP:WuU5LKdWJy8Q+ucNMPD//+Wxz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78e19240700d9c7fe0d77491a35c98283446cfcb212e47fe0ba9b581a17b932

Files

c78e19240700d9c7fe0d77491a35c98283446cfcb212e47fe0ba9b581a17b932
.exe windows:4 windows x86 arch:x86

de263c2ac7e3d711e3b4b15ae30d560a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
QueryPerformanceCounter
HeapAlloc
GetProcessHeap
CloseHandle
Sleep
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE