76d7e38cb55cfda709c72e860ad76552 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76d7e38cb55cfda709c72e860ad76552
Size

64KB
MD5

76d7e38cb55cfda709c72e860ad76552
SHA1

f8d5d1d1f1bbc61f29c0cc23c884531750bdab19
SHA256

cfeafd45bf9852a0daf48c602178cf7590000cb02b3dbed91f997e4a53d8e8e0
SHA512

cb06511bf9385ea1be6e958697035c37dd081fb48e5fcb7d32a0f40d3206689b3f1f0e035461347d5242a8c9d6d1b0c9bc01f5eb19220f0e3956c74db1820d4f
SSDEEP

768:mgr0N/SKCfXJ879YIb/CvcchZqTEz2n27YT8t+qzTkBOMVlfW8hij2G74lrcGCMz:70+BySGCvmYzmDT8t1TkXECix77MKQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76d7e38cb55cfda709c72e860ad76552

Files

76d7e38cb55cfda709c72e860ad76552
.exe windows:4 windows x86 arch:x86

e9ccf6024ac776e9358ef5aed50f5709

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
CreateThread
GetModuleHandleA
GetStartupInfoA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
strcpy
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
_initterm

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ