774d1d8c187293d9c17e9b63c6f5b0fb | Triage

Sharing

General

Target

774d1d8c187293d9c17e9b63c6f5b0fb
Size

56KB
MD5

774d1d8c187293d9c17e9b63c6f5b0fb
SHA1

511f2f1edd7b73c01d1ac66189dcb6196ff09123
SHA256

77ebaecf2f32c4685d51931563e628841b0334c0d351d5b38d9b29b4f0f04066
SHA512

5ca5962117489bdf8edb70b64faf887a745437ef10d875a55e92c2a43701433b4f1674aabdaddd70cdd25981392c5095c8b3192fb4f8b76d9d00f8377fa2c385
SSDEEP

768:PfhXhwYuTmoKY73ROuiEGMTRO9xmcEZc77CZIdbGN5Gd:PfpKYuK83wpE9Ex3TKZiX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
774d1d8c187293d9c17e9b63c6f5b0fb

Files

774d1d8c187293d9c17e9b63c6f5b0fb
.exe windows:4 windows x86 arch:x86

31a75b51e2474130b2d2a802a293d720

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
ExitProcess
lstrcmpiA
VirtualProtect
IsBadReadPtr
GetProcAddress
LoadLibraryA
CreateThread
GetModuleHandleA
GetStartupInfoA

user32

SetTimer
DefWindowProcA
TranslateMessage
DispatchMessageA
KillTimer
SendMessageA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetMessageA

msvcrt

_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_exit
_XcptFilter
exit
__getmainargs

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 974B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE