76cce31962c033ed449f44d0d27f6bed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76cce31962c033ed449f44d0d27f6bed
Size

80KB
MD5

76cce31962c033ed449f44d0d27f6bed
SHA1

27fa2d1d1760d65b398aaa53348fe78d4d7890b9
SHA256

05ad48754b5f5987e7c22659b2710e1dba266e7c5d20eabbfb686e7819bda045
SHA512

0600da0e6527f9e6f98126a2fb19b49cf549b19a39037859d1eb06a7676a1bf903f097e46616065c74575f2cd3fb2a681dd09a4a59049b5e3b5fb436d5692a5f
SSDEEP

1536:KeGNo+TvGPAUUD1UZgHTUhJuHM5TNPN4z1R+Q82hW8fPL:hGNxvGPAUfATUh0aN88vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76cce31962c033ed449f44d0d27f6bed

Files

76cce31962c033ed449f44d0d27f6bed
.exe windows:4 windows x86 arch:x86

ed2348c23888ae1f3086cbd19ebdb1ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NumaVirtualQueryNode
LZStart
GetCompressedFileSizeA
Heap32ListNext
GetProcessHeaps
GetConsoleProcessList
LZCloseFile
ReplaceFileA
UnregisterWait
RegisterWowBaseHandlers
AddRefActCtx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE