1777da58a92dd7ed6fff90eab56d70e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1777da58a92dd7ed6fff90eab56d70e9
Size

908KB
MD5

1777da58a92dd7ed6fff90eab56d70e9
SHA1

8d3ec058fc6b2a29fdf5878d22f27590c011c324
SHA256

818c8a493b57f16c8ae316d1f743c68086e8da89d274e4aa0b6cdf1f8e305a2b
SHA512

2a6d4444aa679eaec7344cc64776255c4b77797e3e71665e4c9003812ee05b03949e94c8dc502a110b8bc2daf820de46666387fdc034c97322d2899743a670ea
SSDEEP

12288:hrAnu2N2uW63TFTnaL/XDWJ0A3/3UU7QJskvhURB1IZeG6QrGjWiGicp7K6ORHy:SNz9aLvDWJ0q/kUzOURId6QrSWfjqy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1777da58a92dd7ed6fff90eab56d70e9

Files

1777da58a92dd7ed6fff90eab56d70e9
.exe windows:4 windows x86 arch:x86

49875b5e18d562ee27363217fc580371

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

netapi32

Netbios

Sections

CODE
Size: 58KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE