770c7688ff649d1ec58edb654b221517 | Triage

Sharing

General

Target

770c7688ff649d1ec58edb654b221517
Size

315KB
MD5

770c7688ff649d1ec58edb654b221517
SHA1

e2f0cfec8644a85bd708bae1db17a2f05fc81e9e
SHA256

6d65df9056370e5216a0dd34e5ea92ae1a1adab0703861292c25339cb5a176df
SHA512

f105fca2b1899717807732124e1ff8d63bf30ba9fc8ce64169c2ff762c6a49f2357c8c37d7655d3343255fb6e9456ba65d24a4304b04e43cc2f636d01ce94038
SSDEEP

6144:qXDXL0BvnjbJDB7VHMkzQB9qnxc4O/3Rn:0b0BPjb37ykeuxc48

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
770c7688ff649d1ec58edb654b221517

Files

770c7688ff649d1ec58edb654b221517
.exe windows:4 windows x86 arch:x86

f0c81b6f8530eba9d7b8894954822d1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

shell32

Shell_NotifyIconA

Sections

.text
Size: 150KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE