77b1d3867465c78360f094a00043e591 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77b1d3867465c78360f094a00043e591
Size

462KB
MD5

77b1d3867465c78360f094a00043e591
SHA1

cd8ba3c28d224a449300ebf6f172c803575643ea
SHA256

e33cf8925711d4a0df14b018de5cd353020c477011e20acb8896c3ed98c94648
SHA512

78432cf4728a67bc8eb4e859faf3fd7a1f5c4dd2158e85336c2632b2304f64693dfed0cbe0443d3fdc500cee8f977b167e7ee9a8a310b58f9a9f8d6e225e0965
SSDEEP

12288:0r6ofVA19WeKgeYrBM5boYKSafLdp5VVm:0+MVA1zKgpBo1KSs5VVm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77b1d3867465c78360f094a00043e591

Files

77b1d3867465c78360f094a00043e591
.exe windows:4 windows x86 arch:x86

50bd89437edd7d864944d03b054cdec4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToFiber
GetProcAddress
ExitProcess
GetPriorityClass
GetModuleHandleW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ