2077fb4a390790fbb4a9398cfa658598 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2077fb4a390790fbb4a9398cfa658598
Size

2.8MB
MD5

2077fb4a390790fbb4a9398cfa658598
SHA1

1f31965caa491c3fbb3e98b76e7cf6830715deaa
SHA256

9c2f999741e6031525540b3f396994619b18aa147aa163615e6af02924f7243a
SHA512

0f9bd15c201f2c4ab134fa2bba47c7759812351c481b600d88ab68beafc07d382da4dd477a2851cbbb2c4a01e84790f1db038601e984e7be148c2391e960eba5
SSDEEP

49152:AcinSxDxs4dt++Bjsw5N7cJSptVnCfCvhPqoXq5fhpxF8yfV+yqVSP:enSt9t+Yjsw5N7copjCKpys8ffA0V+wP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2077fb4a390790fbb4a9398cfa658598

Files

2077fb4a390790fbb4a9398cfa658598
.exe windows:4 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wwntwivc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jrfgbhoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE