c78bb7f9ceb950f7c68cb29d476828a0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c78bb7f9ceb950f7c68cb29d476828a0N
Size

94KB
MD5

c78bb7f9ceb950f7c68cb29d476828a0
SHA1

5bbe5a0369b3742d8759f4f141c7b364d5688e49
SHA256

8ab0c1eb0f119d13d3fd99212ed155c43357484f5206ed292c3586a424f3ccd2
SHA512

e840f4563babd4cda8e01d1c9087c684004dc0bd6c0e109c27313f8898d45ee09675d011893932351a0d0a0781ab877c0e7c1c25874da52f15b20f548ee3b9ba
SSDEEP

1536:KhSwVt0N0k74r8nBo+FbD05gjkX8edia+CDmnRCbn5a3yhRJAHXtNA6U/yY8MQzO:PwVSN0IHBoefc584BZnnIrHXtF6CMgO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78bb7f9ceb950f7c68cb29d476828a0N

Files

c78bb7f9ceb950f7c68cb29d476828a0N
.exe windows:4 windows x86 arch:x86

6d9720d6f9399cca1d54c1efcf068e2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

MessageBoxA

advapi32

GetUserNameW

ole32

CoInitialize

Sections

.MPRESS1
Size: 78KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE