76ef1c9ef925268a5aa41e375ec78e98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76ef1c9ef925268a5aa41e375ec78e98
Size

228KB
MD5

76ef1c9ef925268a5aa41e375ec78e98
SHA1

3730020919a21e68596b1dca68715fe8faaded87
SHA256

f175d8d047569ae00bbc5667d12e87b0138600052fdb6be81e750fd7c2140347
SHA512

a476ede86951fe0929a8f4ebd4d381b1b8dbd2f7ea3cd51be25dfcba6ce287be3b746fd9f1aa5c903e4a5b16b81006a97f31aab54487fbb918416319b130ca44
SSDEEP

6144:OzVJknxTUKOjkC6yDKiHvLj4q3YwyH3pP9QgNIma0fr:OzPkKrAynLKtX3hfr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76ef1c9ef925268a5aa41e375ec78e98

Files

76ef1c9ef925268a5aa41e375ec78e98
.exe windows:4 windows x86 arch:x86

b81c91ce97604dd660f21c0928ced807

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
GetACP
WriteConsoleA
GlobalGetAtomNameW
VirtualAlloc
IsValidCodePage
GetOEMCP
RtlUnwind
GetLocaleInfoA
GetConsoleOutputCP
TlsAlloc
EnumResourceTypesA
HeapReAlloc
GetDateFormatA
MultiByteToWideChar
GetTimeFormatA
SetThreadExecutionState
SetStdHandle
GetCPInfo
TlsGetValue
HeapSize
TlsSetValue
RaiseException

rpcrt4

RpcStringFreeA

shell32

SHGetDataFromIDListW
DragAcceptFiles
SHGetFileInfoA
SHGetPathFromIDListA
ShellExecuteExA
SHBrowseForFolderA
Shell_NotifyIconA

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ