77758f3d32a11e6548b2821b78971217

Sharing

Copy URL Twitter E-mail

General

Target

77758f3d32a11e6548b2821b78971217
Size

167KB
MD5

77758f3d32a11e6548b2821b78971217
SHA1

b0b348b61b6511164c8deba1a6019c1d20a645cc
SHA256

e24acde1adb547f01ae32f36ab88170fd99f6cfdd83b2fe12f6d18beb905b4b1
SHA512

be7a50bd240f1c26a4550cb8482ac20987bd0d4dbec545bcbc7e2e86a7031a9e66bd7f546172612d0eb1cddfbfab8a0622c4b823f3bb0fe2146becc3e2818fd2
SSDEEP

3072:hupWJkyDQkQpaslj+a2ddXLS7WR178kXjSXw/6gQ47N61joysxBmK:hupqjDQkOauj+nlLdxN01hsjV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77758f3d32a11e6548b2821b78971217

Files

77758f3d32a11e6548b2821b78971217
.exe windows:4 windows x86 arch:x86

86c2f9d6bdbfcd806cda7065710083aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyW

kernel32

GetThreadPriority
RaiseException
HeapSize
GetCPInfo
GetLastError
GetUserDefaultLCID
HeapCreate
GlobalAlloc
DeleteCriticalSection
GetLocaleInfoW
InterlockedDecrement
QueryPerformanceCounter
GetStringTypeW
InitializeCriticalSection
GetCommandLineA
GetEnvironmentStringsW
SetStdHandle
GetFileType
CreateFileA
GetProcAddress
SetHandleCount
SetCommTimeouts
RtlUnwind
TlsFree
GetCurrentDirectoryW
WideCharToMultiByte
VirtualFree
InterlockedIncrement
GetStdHandle
TlsAlloc
GetConsoleCP
WriteFile
GetModuleHandleA
TerminateProcess
IsDebuggerPresent
EnumResourceNamesA
GetConsoleMode
MultiByteToWideChar
FreeEnvironmentStringsW
HeapDestroy
IsValidLocale
HeapAlloc
GetCurrentProcessId
LCMapStringW
GetStartupInfoA
UnhandledExceptionFilter
GetCurrentThreadId
EnumSystemLocalesA
TlsGetValue
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleOutputCP
SetUnhandledExceptionFilter
FlushFileBuffers
GetProcessHeap
ExitProcess
GetACP
LCMapStringA
LeaveCriticalSection
VirtualAlloc
GetModuleFileNameW
SetEndOfFile
HeapFree
CloseHandle
EnterCriticalSection
GetStringTypeA
GetVersionExA
WriteConsoleA
GetTickCount
GetCurrentProcess
GetFullPathNameW
GetLocaleInfoA
GetOEMCP
HeapReAlloc
SetFilePointer
TlsSetValue
WriteConsoleW
LoadLibraryA
Sleep
ExitProcess
ReadFile
GetSystemTimeAsFileTime
IsValidCodePage
GetModuleFileNameA
SetLastError
GetFullPathNameA

user32

GetClassLongA
MessageBoxW

ole32

CoCreateGuid
CoUninitialize
CoCreateInstance
CoInitialize
StringFromGUID2
CoSetProxyBlanket

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

rpcrt4

UuidCreate

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86c2f9d6bdbfcd806cda7065710083aa

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

ole32

shell32

advapi32

rpcrt4

Sections

.text Size: 135KB - Virtual size: 134KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 28KB - Virtual size: 27KB

.crt Size: 512B - Virtual size: 76KB

.text
Size: 135KB - Virtual size: 134KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 28KB - Virtual size: 27KB

.crt
Size: 512B - Virtual size: 76KB