76dc27f0fa68ea6952d1b3581cd98a4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76dc27f0fa68ea6952d1b3581cd98a4b
Size

38KB
MD5

76dc27f0fa68ea6952d1b3581cd98a4b
SHA1

2215f819c4c4b3e3d3648fb7687d2c8273985a01
SHA256

20d10fbf5b2e9b092a99c23cf84460efc75d5099ca7fefa44bb7b7f5e50bd4b0
SHA512

807e6a92192ca781c9de61bad0ce5194b39f373c96bc49388ba10bdb278f34d429e735cb01d1417b6ac9d848ddd838725af6967877b1e097b6c392b6539b31b1
SSDEEP

768:0IzxmQZ65j5x7noeG43eQtwvKc+Geyg0xpACm9QK5wxDMcbEoksDDXsp6AEEEvEH:/z+5jHtOQtCQzyg0x6uK+TbEopDDsp6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76dc27f0fa68ea6952d1b3581cd98a4b

Files

76dc27f0fa68ea6952d1b3581cd98a4b
.exe windows:4 windows x86 arch:x86

9bc7744d96607e5b979c7dbdf2be24d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
WriteFile
GetLastError
ReadFile
VirtualAlloc
VirtualQuery
CloseHandle
SetFilePointer
SetStdHandle
DeleteFileA

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE