77bf0aeacd0ee6d82598c755e5fa3a83

General

Target

77bf0aeacd0ee6d82598c755e5fa3a83
Size

259KB
MD5

77bf0aeacd0ee6d82598c755e5fa3a83
SHA1

94b7d72e4a72f6e40898c8c4ffbd7a94395b3edf
SHA256

98cf5c1a873cdc89416cc4b995e9fb0f966ec6c5795b27a9776280dc3e74ffdf
SHA512

dbeda3be0869adf4e26b6d5735f9934486151cbc84a7458d967653d86125a90fe678371f98f7fd81e8a79ee782ed4033735f109cf2ff5d2f4ed75fffa2b920ea
SSDEEP

6144:twfqeFWabx+B2P/VlHOdnbaH3nY/+w3IH8W256pvdOsE7:t2Wy2Mchau+mbLApvdO/7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77bf0aeacd0ee6d82598c755e5fa3a83

Files

77bf0aeacd0ee6d82598c755e5fa3a83
.exe windows:4 windows x86 arch:x86

3f17681f861b920d25140f42df9b2d0b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateFileMappingA
CreateMutexA
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
ExitProcess
FreeEnvironmentStringsA
GetCurrentProcess
GetEnvironmentStringsA
GetEnvironmentVariableA
GetExitCodeProcess
GetFileType
GetFullPathNameA
GetModuleFileNameA
GetPrivateProfileStructA
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetSystemTime
GetTempPathA
GetTickCount
GetUserDefaultLCID
GetVersionExA
GlobalHandle
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
LCMapStringA
LocalAlloc
LocalFree
Module32First
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ResumeThread
SetCurrentDirectoryA
SetEvent
SetFileAttributesA
SetLastError
TlsSetValue
VirtualAlloc
VirtualFree
VirtualQuery
lstrlenA

user32

ClientToScreen
DialogBoxParamA
GetForegroundWindow
ReleaseCapture
SendDlgItemMessageA
SendMessageA

advapi32

ChangeServiceConfigA
DeleteService
FreeSid
GetUserNameA
InitializeSecurityDescriptor
LookupPrivilegeValueA

Sections

.text
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 1024B - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f17681f861b920d25140f42df9b2d0b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 245KB - Virtual size: 244KB

.DATA Size: 1024B - Virtual size: 2.6MB

.data Size: 8KB - Virtual size: 12KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 245KB - Virtual size: 244KB

.DATA
Size: 1024B - Virtual size: 2.6MB

.data
Size: 8KB - Virtual size: 12KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 1KB