76b8c6d41fce3075cb58aa6deb891dbb | Triage

Sharing

General

Target

76b8c6d41fce3075cb58aa6deb891dbb
Size

196KB
MD5

76b8c6d41fce3075cb58aa6deb891dbb
SHA1

d13c2d28844d97178c8457a5c13c367e402772e5
SHA256

77f63e36ee53302de9b3b79e175a4855d9dddcdd2bc3c14cb1b32b8490a7cde7
SHA512

1f91997f5cd9d6be81f3e6950233fb7ed8acd55a655e2702745b97a3ed9b510d0890fa5b8a626343a220511841f6c5adf384ebc8936f68134c8e405d299c2a5e
SSDEEP

3072:GVmHcLY0bOV7/S9AJJjWm/73gAZdujVvPdwiWoQmAPSL0RFR0Yu7J:g1bOVLdJh//73TEhPdXAPSGn0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76b8c6d41fce3075cb58aa6deb891dbb

Files

76b8c6d41fce3075cb58aa6deb891dbb
.exe windows:4 windows x86 arch:x86

fe1e6c576acc1b15c6ff53296e69202d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
IsBadReadPtr
GetProcAddress
GetOEMCP
GetCommandLineW
ExitProcess
GetACP
VirtualAllocEx
GetModuleHandleA
LoadLibraryExA
GetModuleHandleW
IsBadHugeReadPtr
GetCommandLineA

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ