76a2ee68937c3d8ffcbba3ab0745a90f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76a2ee68937c3d8ffcbba3ab0745a90f
Size

21KB
MD5

76a2ee68937c3d8ffcbba3ab0745a90f
SHA1

69e4f5a947385baaa05155398504adcb213dedec
SHA256

04b0cd4e90278a95b5df53eca2108dac3d25e5e3c97429c466c7937b744ae366
SHA512

f3f11ad8c1e49fa3ea13cb475a7a940564b6134c1150d924ebb12dc628cf699ba53e2026daec46ee1d8faba0edb6be2281353ff501ec6d30bdaf511b49b4fcc3
SSDEEP

384:ErZVq8ybWi4MKAc5CAGWwmHCILiJ85unwowGSkJSsgbck:EVVq8pN1LQoSw/9b9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76a2ee68937c3d8ffcbba3ab0745a90f

Files

76a2ee68937c3d8ffcbba3ab0745a90f
.exe windows:1 windows x86 arch:x86

a85f8952dc33e1e906e9660d9bfba631

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetStringTypeW
GetModuleHandleW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE