76f1cdb5f82dd483fc8057f18c98d3f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76f1cdb5f82dd483fc8057f18c98d3f7
Size

59KB
MD5

76f1cdb5f82dd483fc8057f18c98d3f7
SHA1

1ce94cfe34ffd38c112b503937821249b949f294
SHA256

638e847c1c85c3243be319a29d6701c5c8c03dc2197dce27e38a652a13ac699a
SHA512

445be153206905921582f84ae6956afcd38a3e9cb0253668b49a20fd939029473b26e3cfb3d1a39410ec10e36a59a42fd977ddea392be0afcc1f887bde16532c
SSDEEP

1536:gkQW4tBTbLUAIGp+3Tt3GU+fGgObqEktgOKwJ:gkQvH1IGyZGHf98rEXLJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76f1cdb5f82dd483fc8057f18c98d3f7

Files

76f1cdb5f82dd483fc8057f18c98d3f7
.exe windows:4 windows x86 arch:x86

0380a00e9a00ffdc03a97c8241595930

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ToAscii
FillRect

kernel32

LoadLibraryW
SetHandleCount
ExitProcess
FreeEnvironmentStringsW
GetACP
GetEnvironmentStringsA
GetTimeZoneInformation
GetUserDefaultLCID
LocalFree

advapi32

RegSetValueExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.code
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ