76cdbf9e8b96c0c9d81f8af4992ba196 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76cdbf9e8b96c0c9d81f8af4992ba196
Size

45KB
MD5

76cdbf9e8b96c0c9d81f8af4992ba196
SHA1

7c275b25faa1559fb9f32b2023560f86e46e01b8
SHA256

cb7766907f9ef7cbe3a9ad97f61f202d0fd11d67004c6379614dc0b28a2e0158
SHA512

4eca9977ff21692387bf408f6ac8491b159067d3fd01af25662f512e84dd5f37d1c5b5db461b1f574211d4e96aa6272be96b2324ada1ed11648c3df378022cdc
SSDEEP

768:cjZyseR8sAr7dTrSMIcwEdYGD8V/q85rpN3m+fdI1IbbV:KVLPd3gfGD8Ft5jNfdIa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76cdbf9e8b96c0c9d81f8af4992ba196

Files

76cdbf9e8b96c0c9d81f8af4992ba196
.exe windows:4 windows x86 arch:x86

376c83a23d2b82644b5174f51c7c1e2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
Sleep
lstrlenA
GetVersionExA
GlobalAlloc
GetLastError
LocalFree
lstrcpyA
GetFileSize
GetStartupInfoA
GetModuleHandleA
GlobalFree
CreateEventA
LocalAlloc
CloseHandle
GetCommandLineA
lstrcatA
FreeLibrary
GetTickCount

msvcrt

__p__fmode
__set_app_type
__CxxFrameHandler
_exit
wcslen
_except_handler3
_initterm
__p__commode
wcschr
__setusermatherr
_acmdln
toupper
_controlfp
_XcptFilter
memmove
rand
exit

user32

CreateWindowExA
GetClientRect
MessageBoxA
SetFocus
PostQuitMessage
DefWindowProcA
GetWindowRect
ScreenToClient
ShowWindow

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrs
Size: 34KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ