76db1fcb32bcf9bdd39f6b10139406e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76db1fcb32bcf9bdd39f6b10139406e8
Size

202KB
MD5

76db1fcb32bcf9bdd39f6b10139406e8
SHA1

d48ac2b7720e037a5bd01abbd557b280fcf0b201
SHA256

9d4ebde0e16349b71985af0ebdeeb0e48a379e61277c8e0a892da9437fa5474b
SHA512

f7b1d5d683b09c6e1ca52d7e1af95badea73c4dbecd51f57fb5b015e65a69d9e3cfb00f280e1ac2e8f63577d7b7bed4808397a5e821198d32c6223780a6dea97
SSDEEP

3072:T0mwxCnPO6r3A95n4sV4B1YwUO/ftnI5WAquQ7u9Z0498sYxbnGaZ7/ZcQI:mCPO9XVS6SQTJH9ubnGc7Wr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76db1fcb32bcf9bdd39f6b10139406e8

Files

76db1fcb32bcf9bdd39f6b10139406e8
.exe windows:4 windows x86 arch:x86

df2643f0176b7398fe1443ca416a5ff0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
CharLowerA
LoadBitmapA
LoadCursorA
CreateMenu
LoadKeyboardLayoutA
GetCursor
GetDC

kernel32

LocalReAlloc
GetCurrentThread
GetCommandLineW
LoadLibraryA
GetCurrentProcess
GetCommandLineA
LocalAlloc
VirtualAllocEx

shell32

SHGetFolderPathA
Shell_NotifyIconW
SHGetDesktopFolder

Exports

Exports

_TRgj5Q@16

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text