0789ad0d2980eed3b7fdb97e79b1d1dc3f88a9ddaca8e8a2d787339972ca1805 | Triage

Sharing

General

Target

0789ad0d2980eed3b7fdb97e79b1d1dc3f88a9ddaca8e8a2d787339972ca1805
Size

56KB
MD5

b116b1366e988cd2ff3f0ea1609c5ddd
SHA1

eb69e7589dd434590d36ae073b20dee67a31bd59
SHA256

0789ad0d2980eed3b7fdb97e79b1d1dc3f88a9ddaca8e8a2d787339972ca1805
SHA512

e04e9dae0cafd7c8b86bc368070fe86f84827d2951b2ba6a6c1c126a3473fcf6d4bdb4e2bb880382a26c85bc251e4f383f4e296ffcce203270d18bdba8ee8977
SSDEEP

1536:jh2m5GICFbJ3LWhUDgUIp0XL676OmRnT+8Ivzq:j/8EhHuXL6elnT+tvG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0789ad0d2980eed3b7fdb97e79b1d1dc3f88a9ddaca8e8a2d787339972ca1805

Files

0789ad0d2980eed3b7fdb97e79b1d1dc3f88a9ddaca8e8a2d787339972ca1805
.exe windows:4 windows x86 arch:x86

95beccb35ab9c716505b2885c7e9c6c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegLoadMUIStringW
IsThreadpoolTimerSet
MapViewOfFile
WriteFileGather
DuplicateHandle
MapUserPhysicalPagesScatter
AcquireSRWLockShared
SetConsoleFont
FindNLSStringEx
PowerClearRequest
ReadFile

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE