76c6da251ff5517901c3543871c8502e | Triage

Sharing

General

Target

76c6da251ff5517901c3543871c8502e
Size

396KB
MD5

76c6da251ff5517901c3543871c8502e
SHA1

5de99cf850716fad4072bfecd15a0de0f17deff1
SHA256

5579ebe855d9b02826592a82d4ec627b41af3e6d43caada442b240424c4c0804
SHA512

d63cf288a2e62cb726e7c7202d0d2e2262ff9440669a0421f43e100826e69c55bc758349e23f9ddaa0efeb3d9b7f4f7fff3ca490e2286d16832037221a57fc59
SSDEEP

6144:v4yp6NVyX7Mq28roVnDtdI1o3hwz9yD38HseQtR29Q/vCRJN:vG0rN28rohs1o3hy9sgZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76c6da251ff5517901c3543871c8502e

Files

76c6da251ff5517901c3543871c8502e
.exe windows:4 windows x86 arch:x86

0648ba6337d4e0e4567b4a167bc85cf5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
GetTickCount
VirtualAlloc
GetProcAddress
VirtualFree
OpenMutexA
GetModuleHandleA
CloseHandle
SetStdHandle
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetLastError
ReadFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
FlushFileBuffers

winmm

waveInClose
mixerGetControlDetailsA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 470KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ