74b476f753da72b30b85009adc3e3caa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74b476f753da72b30b85009adc3e3caa
Size

189KB
MD5

74b476f753da72b30b85009adc3e3caa
SHA1

42208e6671858d4ce33a4900555d32c6b821a780
SHA256

22c3c6fc5b35bec9943764fc779d2cf08e893821ab226e76eedb4dc063d8d0f8
SHA512

4c19072b042cdb3101397875d203c88efa5d4b76d5a027ab8121277cbd999211468c3a88b40fd98cf48b3fb0713496da0a02ac475c32e4132ac0573a1688983a
SSDEEP

3072:x/SFDkFh4eI9DtwXJdfgZAhXcdoe6bv/hZgqfIZjRdEqmsNk4bdccXJ4MISqzzQv:yeOe+Dt4qZcXcd+bv3gqfIVRd8sNtdc5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74b476f753da72b30b85009adc3e3caa

Files

74b476f753da72b30b85009adc3e3caa
.exe windows:5 windows x86 arch:x86

0aeab4185e2768f0c3b9bc32cf8ea2f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_cexit
_exit
__p__fmode
__setusermatherr
_XcptFilter
fseek
__p__commode
fread
__set_app_type
_controlfp
wcstombs
strspn
_initterm
_ismbblead
exit
wcspbrk
_amsg_exit
ungetc
__getmainargs

kernel32

FindResourceW
SetCommBreak
GetDateFormatW
CreateFileW
GlobalFlags
DeleteFileA
SearchPathW
FileTimeToDosDateTime
CreateThread
WaitForMultipleObjectsEx
GetShortPathNameA
MoveFileA

Exports

Exports

_ReplyMessageReplyMessageReplyMessage@0

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ