78a20abb2d252340060ad709f0b6c5696bc27016dd58bc13db680b556c6f7c92N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78a20abb2d252340060ad709f0b6c5696bc27016dd58bc13db680b556c6f7c92N
Size

4.2MB
MD5

3717eeb5d73b7dd70156ebb4487f2780
SHA1

93ff3ba6fc1ff049e119b1e4083f896690992f81
SHA256

78a20abb2d252340060ad709f0b6c5696bc27016dd58bc13db680b556c6f7c92
SHA512

9c81430fba608cae61448ac05a03b58ac24eeca4cc52ea5c99839785e7ad54cd8b973c048b72e42c9c7df8f9d47e53c52d582b2d7b0087668289e0284ec4316c
SSDEEP

98304:Cmhd1UryezUTIbtxXmWo8Ne8OVLUjH5oxFbxhVLUjH5oxFbx:ClaQxXmPsOVUjZEdhVUjZEd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78a20abb2d252340060ad709f0b6c5696bc27016dd58bc13db680b556c6f7c92N

Files

78a20abb2d252340060ad709f0b6c5696bc27016dd58bc13db680b556c6f7c92N
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 351KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l2
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ