74b80a2d154807e988ef4d9923c7641c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74b80a2d154807e988ef4d9923c7641c
Size

662KB
MD5

74b80a2d154807e988ef4d9923c7641c
SHA1

36778048ea00af2ddabaa873428ba1083596f6b1
SHA256

5f5969a2c2893e169939e6a413c2888303d67c9071d3d8cc6ed7857ff0cfb95e
SHA512

9e7676778b0967b6329065218237f314a1b1143e4b789b460f7d22d0fc174000809aa08a3b98f0d87d043251bf2878d0a29c36fa9f935c085c98408bcca1891d
SSDEEP

12288:Unr4sb7oaU4cSVYxk+++Cvi44aJyoUlDafJ2nRvvI/mgDRgLdMZtpj:UrjbkJ9xk++fiocoUlDnnRvOmg9g5ML5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74b80a2d154807e988ef4d9923c7641c

Files

74b80a2d154807e988ef4d9923c7641c
.exe windows:1 windows x86 arch:x86

9f140ed6f6b4239962c828950e6cc50d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

VariantCopyInd

Sections

CODE
Size: 657KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE