772cc4d00dc5c28288a38bd79e2197bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

772cc4d00dc5c28288a38bd79e2197bb
Size

76KB
MD5

772cc4d00dc5c28288a38bd79e2197bb
SHA1

5bb2f83a1b211fbffd1851936e96cafadc224c24
SHA256

58fb531db5d799729428d6282cc536b46fd39bcd0196779c3adae1cd4da2359b
SHA512

8d375da565c5a129e5592b440423b0a1c4f5164bee8c0ef6ed841e14a6a54d335059da6cce6a7cdde4658ad1af8c2a350edc4881a02b00367eebf794f5597eea
SSDEEP

1536:K08uMAXOKmHsjhHo1CZIgrRa0GKIjEErxTWDTMqhGKYIZTET8x:K9AXfEsW16wRnjBkMqhGKZTbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
772cc4d00dc5c28288a38bd79e2197bb

Files

772cc4d00dc5c28288a38bd79e2197bb
.exe windows:4 windows x86 arch:x86

7d541a92db63701c6963450d3b0746b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesW
CallNamedPipeA
ProcessIdToSessionId
GetStartupInfoW
GetConsoleCP
EnumCalendarInfoA
CreateProcessW
GetCurrentProcess
DebugBreakProcess
GetConsoleTitleA
GetQueuedCompletionStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE