77961fb4fb9df4440868474633a0baf3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77961fb4fb9df4440868474633a0baf3
Size

2.1MB
MD5

77961fb4fb9df4440868474633a0baf3
SHA1

19af323ea4cd6468334772dd88d8834bb3b7414d
SHA256

8174a53304340f02d96108bddd711bbf71ead2f93a135a8d2ffbad48c14d6460
SHA512

e6d7f342d2d8625342dc276c8e7fdaa1b4c654a8dbc80fc679d85774859656aa12ac1574b97c51bdd0ff02e9739ffeacc807f75d33d228150bee3ee536774d91
SSDEEP

49152:fzCq9w1BeWmqLnAnO5ICTm4Hz6shTodul:fzP9O5fLnAngIaV6shTodu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77961fb4fb9df4440868474633a0baf3

Files

77961fb4fb9df4440868474633a0baf3
.exe windows:4 windows x86 arch:x86

ea41fa40d9c3f152255f42ac2a13b676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
SetCurrentDirectoryA
lstrcpyA
EnumResourceNamesA
CreateDirectoryA
lstrcpynA
GetUserDefaultLangID
LockResource
LoadResource
SizeofResource
FindResourceA
FreeLibrary
GetProcAddress
LoadLibraryExA
lstrcmpiA
SetFileAttributesA
lstrcmpA
MultiByteToWideChar
ExitProcess
GetCommandLineA
GetModuleHandleA
GetLastError
SetLastError
GetSystemDirectoryA
GetCurrentDirectoryA
GetFileAttributesA
GetDriveTypeA
lstrlenA
lstrcatA
CreateFileA
lstrlenW
WriteFile
CloseHandle
GetStartupInfoA
DeleteFileA

user32

CharNextA
GetClassNameA
SendMessageA
EnumWindows
LoadStringA
wsprintfA
MessageBoxA

advapi32

RegCloseKey
RegOpenKeyExA
RegFlushKey
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ