76c676b573def2acab547ab6d1777bf6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76c676b573def2acab547ab6d1777bf6
Size

4KB
MD5

76c676b573def2acab547ab6d1777bf6
SHA1

fd6d978cb3adf7e66931d839ada5056cf1cebab9
SHA256

88e4a0319de08021ce9b8205df3afafd8f3d0da25198e7e64765ca2f993164d9
SHA512

8c2556766b4b7697492838bc1e73135d85356f23417a00f78711398848dcd055ee1eaac8725c06da12c69e218a3d7a1eed464f59d1419ba2267a8a69be85c35f
SSDEEP

96:T9VBgNBAmS7EQlCKBLB4vM3zsbsz7jHeig:T9fnCKB1qGr77eig

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76c676b573def2acab547ab6d1777bf6

Files

76c676b573def2acab547ab6d1777bf6
.exe windows:4 windows x86 arch:x86

df60ce85430d451c4df5c1c518b1a9de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetProcAddress
lstrcatA
GetSystemDirectoryA
WideCharToMultiByte
WaitForSingleObject
lstrcpyW
GetCurrentProcessId
CompareStringA
lstrcatW
CloseHandle
ExitProcess
GetModuleHandleA
GetCommandLineA
SetEvent
CreateThread
ExitThread
CreateProcessA
Process32Next
Process32First
CreateToolhelp32Snapshot

user32

CloseWindow
wsprintfA
DestroyWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

advapi32

RegOpenKeyA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE