00e773c2a37151ccbfb7776e94d5c772 | Triage

Sharing

General

Target

00e773c2a37151ccbfb7776e94d5c772
Size

24KB
MD5

00e773c2a37151ccbfb7776e94d5c772
SHA1

57c49661f1599a7bc233c5294f1f666321a4637e
SHA256

7e560021ea5158840729cc26dbe9fe0088a00b490de46525631ce043b60cf6be
SHA512

3ba4ea8e0093cc7db384a93c4c9d4177969a5b0cd9e7c6471b0f80a13e30e72a383e0722a3b1dab208b8f25077ef6a2e3279dac1b389cee50d166accab74a634
SSDEEP

192:kujVslt/Ty+nOeOgIAm30u+d9J2sOoO6IY4VEI8IVL4oyno5v254Na9:kcslt/2Ap5OOSVEIVVL4avkJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e773c2a37151ccbfb7776e94d5c772

Files

00e773c2a37151ccbfb7776e94d5c772
.exe windows:4 windows x86 arch:x86

7aab1841dd7d30de8a89a1a49758fcae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4129
ord5572
ord2915
ord860
ord4278
ord941
ord801
ord5861
ord541
ord823
ord924
ord922
ord540
ord2818
ord939
ord4202
ord6877
ord858
ord825
ord537
ord940
ord535
ord800
ord5856

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_onexit
__dllonexit
time
srand
rand
getenv
_mbscmp
__CxxFrameHandler
isalnum
_exit

kernel32

CreateProcessA
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetVersionExA
TerminateProcess

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcp60

??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

netapi32

Netbios

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE