79d7f53b0c89c5d6005a93ecfdeff410a26d286cfcb5bff258a72cf869b16ffd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79d7f53b0c89c5d6005a93ecfdeff410a26d286cfcb5bff258a72cf869b16ffd
Size

4.9MB
MD5

31419cd5e8d0db663bb2f32ff927037f
SHA1

db1f2be1c53aa8c2791d839e88835ae1e7609326
SHA256

79d7f53b0c89c5d6005a93ecfdeff410a26d286cfcb5bff258a72cf869b16ffd
SHA512

97613dbdacd60e9e418c62ee1cfaa56f6a486c192c2c711c1154a0dc9ca271bec436332c6e5f838cf9b3c0d7b3ba735755d09a44e7805f81d5f37ce9c2a7fbd3
SSDEEP

98304:DSiNLcAfHisuJyv59QDV1I7KgkaWZSlo+YdpihKCLNAP3/RAHlhexft7:DDcquJ6gDV1I7KgkZS+dHCJAPZFVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79d7f53b0c89c5d6005a93ecfdeff410a26d286cfcb5bff258a72cf869b16ffd

Files

79d7f53b0c89c5d6005a93ecfdeff410a26d286cfcb5bff258a72cf869b16ffd
.exe windows:5 windows x86 arch:x86

1a7c15f5b240e9da3ee3f943807c614d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

SizeofResource
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

wvsprintfA

comdlg32

GetOpenFileNameA

advapi32

FreeSid

ole32

CoUninitialize

Sections

.text
Size: - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upx0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.upx1
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upx2
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ