76e2e00293a3b158e19ee1c0bc8dd8dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76e2e00293a3b158e19ee1c0bc8dd8dc
Size

152KB
MD5

76e2e00293a3b158e19ee1c0bc8dd8dc
SHA1

aead4e2154eb25f94fa5b639b83da299afe228e8
SHA256

582fe2475ba3d284eb1b6c9e46b79f39ed20054b3570858fde220fb76ea75e76
SHA512

04d92c80597767b056f40acf5940323a74f30c803b4e38f8a78e453fcf0524ab1520e5563eaa6f1cd57dd10844eaf67067e7df6f2d22977b85ed3e8dd9814f70
SSDEEP

3072:1IgId77xGL0ngrMFcqgQlODYbCP6rOjcgmNx11jf4DFt3QWVDaSNdHO:1bw08lOEbDRb1FfgtAvn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76e2e00293a3b158e19ee1c0bc8dd8dc

Files

76e2e00293a3b158e19ee1c0bc8dd8dc
.exe windows:4 windows x86 arch:x86

037c58effa0dde56583f033194f449d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

SHFileOperationW
SHGetFolderPathW
ShellExecuteW
CommandLineToArgvW
ShellExecuteExW

comctl32

PropertySheetW

kernel32

WriteConsoleInputVDMA
GetFullPathNameW
GetProcessHandleCount
GetShortPathNameW
EnumResourceNamesA
FreeEnvironmentStringsW
CompareFileTime
MoveFileW
SearchPathW
SetFileTime

shlwapi

SHGetValueW
PathRemoveFileSpecW
PathCombineW
PathAppendW
PathFileExistsW

user32

ReleaseDC
PostMessageW
GetWindowModuleFileNameW
SetWindowLongW
GetDlgCtrlID
LoadIconW
CreateCursor
IsWindow
IsDlgButtonChecked
GetDC
GetFocus
DestroyWindow
SetWindowTextW
PostQuitMessage
MsgWaitForMultipleObjects

oleacc

LresultFromObject
CreateStdAccessibleObject

ole32

CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitializeEx
CreateStreamOnHGlobal
CoInitialize

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idive
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ