0fc76c2cc6fc125046dc6084f7414494 | Triage

Sharing

General

Target

0fc76c2cc6fc125046dc6084f7414494
Size

400KB
MD5

0fc76c2cc6fc125046dc6084f7414494
SHA1

3f6efedb3c960bd3c788b48e4b99906f241efd15
SHA256

e5445130ac5ce9298bcfede3224b3bd7ce3def75952549cf1289555e5caaa657
SHA512

4447b2fde2b3fa7e6c3e66f85f5c13f70ea350790d3f104479d9f05cacd43654b276d30623dc570f7ae82e4751eb3b5a08cac58cf4eb0f2f07587e4bc291d259
SSDEEP

12288:q0KrbN8NWykW77nfa42zOSlDML9U+JAUV2:HKHN8kyX77nfa42ySlnV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fc76c2cc6fc125046dc6084f7414494

Files

0fc76c2cc6fc125046dc6084f7414494
.exe windows:4 windows x86 arch:x86

b76320d01c2661e01d89e7820886b8f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
LoadLibraryA
ExitProcess
CreateFileA
CloseHandle

user32

CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA
wsprintfA

advapi32

RegCreateKeyA
RegEnumValueA
RegQueryValueA
RegDeleteValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
RegCloseKey

Sections

.text
Size: 369KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ