779e03eb2ce29e6958f06aee5c219c7631bf8c956f04edebae5d7ec2230b2ca2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

779e03eb2ce29e6958f06aee5c219c7631bf8c956f04edebae5d7ec2230b2ca2
Size

5.9MB
MD5

df99b774e342a4c2705138c20a29adda
SHA1

34da4e339951a2654f04efb0c5e1ab060f956fb8
SHA256

779e03eb2ce29e6958f06aee5c219c7631bf8c956f04edebae5d7ec2230b2ca2
SHA512

3080bffb0a13c4d8ad21ffde9c48bff7e9bcae50b1005fee3d9f8b8bf36b1808d20bb0ca9d3a4e8f5f6917804150f5f07729bcddabe178bb528cd8d48191f548
SSDEEP

98304:UY+uAH655bmZ2Ixu+FIFPQ25UTzLrJGEnP77qt4Qj3QubzAT66qiT3GRmYugmJaU:OQ5Z+F8Pr2PJvnqmU/bH702MVgmo/M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
779e03eb2ce29e6958f06aee5c219c7631bf8c956f04edebae5d7ec2230b2ca2

Files

779e03eb2ce29e6958f06aee5c219c7631bf8c956f04edebae5d7ec2230b2ca2
.exe windows:5 windows x86 arch:x86

8a7144716015fefc4920a45528d0fa9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

CharUpperBuffW

Sections

.text
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CbOb
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.`o$
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Y<i
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.VCF
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ