75cc67941465653ab9263ad76ff5f941 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75cc67941465653ab9263ad76ff5f941
Size

71KB
MD5

75cc67941465653ab9263ad76ff5f941
SHA1

bfb7a4fe42978e69ce97f6f600385a9f58ea53a1
SHA256

f2ef1af3045489472fe6137e4b344c539a466cf28de763eb467f38485fb18177
SHA512

95f960bd85b99f0236dfe6418d762211a297882683cc4e65aab5baa028234c3985ef2ba58bc7a62955b522ce7e76a694601974415d25157c147e10cda4bc8093
SSDEEP

1536:3/M9g2Y1A3I4H517adPfEiwb8G8JmO/wfur4raXqF9AAPlhhr6:Yg2Ya3I4nafC83ofur6Mw93lhw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75cc67941465653ab9263ad76ff5f941

Files

75cc67941465653ab9263ad76ff5f941
.exe windows:5 windows x86 arch:x86

5a188d99b71a7cc79e84b924d39b72fe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA

user32

LoadIconA
RegisterClassA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORNU
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ