077f9e4c987b6123110ac0f0c87d4a19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

077f9e4c987b6123110ac0f0c87d4a19
Size

179KB
MD5

077f9e4c987b6123110ac0f0c87d4a19
SHA1

b71a840a4261ee9b88c345bb311c761465982c37
SHA256

e740687e2029bc2767a66e3e958f90cadde57c4c9267cddc1a1b49f70dc7a1aa
SHA512

baf63d861546bd24f4964695291c9d877b574afcfe103a1a9ee90698bdb8e3571ba310ddf0bde1825ec3eafe0f5472e5d95bebfa3d6ec36e14efeeac69d4fb24
SSDEEP

3072:gvRVLCr4uiVIwiHcfo7fsQzVpUq/fGC8An+DOeL0XtP2O76bQgsaB:6VGspVJiHc0s0LUkfFnofLeV76QgsI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
077f9e4c987b6123110ac0f0c87d4a19

Files

077f9e4c987b6123110ac0f0c87d4a19
.exe windows:4 windows x86 arch:x86

f6c1e35a80c1f0c1db1f46b50f61a9ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriority
GetProcAddress
TransmitCommChar
FreeLibrary
EnumResourceNamesW
ExitProcess
LoadLibraryW
InterlockedDecrement
LoadLibraryA
InterlockedIncrement

msimg32

AlphaBlend
TransparentBlt

user32

GetKeyState
GetClassLongA
CharNextA
CharLowerA

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ