76a11b7da01537956dfdd7b7dc840f71 | Triage

Sharing

General

Target

76a11b7da01537956dfdd7b7dc840f71
Size

116KB
MD5

76a11b7da01537956dfdd7b7dc840f71
SHA1

088a1f3744a0c27d8812457c83ea5d8e3107f10f
SHA256

b64e8defb536bfebe4e41cf2190a5dd66be9267a2e5739d2843d27390a6e5b00
SHA512

2a057c2552970ed5c8d83e4348d85f847d869b39295a571aaa513975ac4d9bd638e41f2885be589408e8b68b2b682a1733af5938069fc1aa2f7c5712b4b5b619
SSDEEP

1536:OT1Jas7y9sAQVPiBuyF2GpqJdfnlJ0IMZ4G+NgvF5vGrdpHwQQeXxrOyRJy+eVaf:OT1JaRWiBuyF2XfUFYyvSgn4Rk+qD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76a11b7da01537956dfdd7b7dc840f71

Files

76a11b7da01537956dfdd7b7dc840f71
.exe windows:4 windows x86 arch:x86

0c3d2b6c6e2b1f8a293797adae14f29f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreA
CreateFileA
GetCommTimeouts
TlsFree
VirtualUnlock
SetVolumeLabelA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.rc3sec0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rc3sec1
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rc3sec2
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rc3sec3
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ