277d20c63ce3cb4af7633d3989d22e4b | Triage

Sharing

General

Target

277d20c63ce3cb4af7633d3989d22e4b
Size

104KB
MD5

277d20c63ce3cb4af7633d3989d22e4b
SHA1

ba020a4673ec56af16c4db98e30e2ffdc6a2a294
SHA256

f0253566433b7512d1ba44f9d021cbba6a180a6d5baf05ddbcbe0a751b273da7
SHA512

ec9e0a86d5648bce9625c1d6852693a46345197bed85de5c420b1d20d2b9adeea0e11afd6a733c1fa71f609a968e2a10538b247e67f1ee0015e73153ffdd3d43
SSDEEP

1536:oJGgaEpc8koM6w0uIfN6ATUPSy2LFq8TspbtqLdXNK/CvhI/Z0L7e7v:oEgaQc1o3w0qxPSyfVpqLdX8KZIx0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
277d20c63ce3cb4af7633d3989d22e4b

Files

277d20c63ce3cb4af7633d3989d22e4b
.exe windows:4 windows x86 arch:x86

7aba6110d0b2fbab69f5445674eff8a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetVersion
LoadLibraryA
VirtualProtect
lstrcmpiA

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ