77892dbf308032c0caef6ebacb62e6f9 | Triage

Sharing

General

Target

77892dbf308032c0caef6ebacb62e6f9
Size

36KB
MD5

77892dbf308032c0caef6ebacb62e6f9
SHA1

1095085177404319a3a40f97029192479b2bc112
SHA256

b86f34f42610bc8cf71fcfd49334038a2dadfde55eb1a36ec7f07e300c80bc50
SHA512

7f0deeb4b2d6a50f5550aea81b68d7a154647410590b564e334568a37da106c4f1ba115301a84390f634a118abbce2de27c53befea0cd4454acb1e2e6e68a108
SSDEEP

768:WNzYIQPvXTgnIKrxn4gLWrbmGpQUq7+7mWtNQStJ1:WNzYTPvXAJt4gyPbpkwPtSE1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77892dbf308032c0caef6ebacb62e6f9

Files

77892dbf308032c0caef6ebacb62e6f9
.exe windows:5 windows x86 arch:x86

39b62fe8e88458cc82ca721452d9a872

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetFontData
ExcludeClipRect
TextOutA
GetClipBox
ExtTextOutA
GetDCBrushColor

crypt32

CertCreateContext

kernel32

GetLastError

advapi32

AccessCheck

Sections

.text
Size: 23KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nhp
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ