2768632bf7fb0e4afb85f03e79fe6ff7 | Triage

Sharing

General

Target

2768632bf7fb0e4afb85f03e79fe6ff7
Size

96KB
MD5

2768632bf7fb0e4afb85f03e79fe6ff7
SHA1

6299354a2e182fd213a6d18dfd13f622d6b8b24e
SHA256

55d197250cebbc08581223767070467b535234632e63fde0917bfe73bbf8a51b
SHA512

fb470463651d9ef16bcf05af6ef400a728faae29e0bb2ca37cc74be4292963bdb56f8637a2dfa787f0b6516ec48e311a0a9feeb15ed799e6f3893730351bd674
SSDEEP

1536:Cou5YlD7eRV5pOo5Q7s42gNwgrpepeuZRiLF6FGo4GSC2m+KNGEMJGReTf1HQbsI:G5WD7en5p0s/g2gN0h4R64oBSC2m+Kob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2768632bf7fb0e4afb85f03e79fe6ff7

Files

2768632bf7fb0e4afb85f03e79fe6ff7
.exe windows:5 windows x86 arch:x86

35b81a494352e183f1324c904f5fa3da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetUserNameW
IsValidSid

kernel32

GetWindowsDirectoryW

Exports

Exports

GeometryOutput
GeometryInput
?DunnoCapatice@@YGPAXUtagSIZE@@@Z
?ForceCountSys@@YGPAXUtagSIZE@@@Z
?LabelRegit@@YGPAXUtagSIZE@@@Z
?LocalTimerOn@@YGPAXUtagSIZE@@@Z
?SemiForte1@@YGPAXUtagSIZE@@@Z
?SemiForte2@@YGPAXUtagSIZE@@@Z
?SemiForte3@@YGPAXUtagSIZE@@@Z
?SemiForte4@@YGPAXUtagSIZE@@@Z
?SemiForte5@@YGPAXUtagSIZE@@@Z

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ