76a3dfc670acd2c3c85c00e49fb4c028 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76a3dfc670acd2c3c85c00e49fb4c028
Size

175KB
MD5

76a3dfc670acd2c3c85c00e49fb4c028
SHA1

1bba02bccec81a24f924ded9acfd3f51854b6f99
SHA256

dbe08473064be53c101d1e0e9bf216d5499c813fed5d104dad2e995918f22d3f
SHA512

8b2d175085ad41054cd20a3d7a044d432133e6f3fd130fe6c4e267c42f5cc0de38a6544fa81df118c395b00c50eaaea001b8601c7f445971b8ecb05bce1550ee
SSDEEP

3072:JmzrDJF7/LfCg6vtoVsqPnu4l5P9RkARXtgIAm693T83goTLQ/bTwDJ5sZqV:JetF7/T6veVsqFltfttPAm6BLoTLYTwG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76a3dfc670acd2c3c85c00e49fb4c028

Files

76a3dfc670acd2c3c85c00e49fb4c028
.exe windows:4 windows x86 arch:x86

fad4a60f85469f6ba20e330653280b8a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
GetCPInfoExW
GetProcAddress
LoadLibraryA
LeaveCriticalSection
LCMapStringA
DeleteCriticalSection
LCMapStringW
EnumResourceTypesA
LocalFree
LocalAlloc
GetModuleHandleA
EnterCriticalSection
GetLogicalDriveStringsW
GetLastError
SetStdHandle
GetSystemInfo
GetStringTypeA

ole32

OleSave
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc

newdev

UpdateDriverForPlugAndPlayDevicesW

gdi32

GetTextMetricsA
GetDeviceCaps
SelectObject
GetTextExtentPointA
DeleteObject
CreateFontIndirectA

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ