777f4e50463bb335b3ff0a2d1773c4a5 | Triage

Sharing

General

Target

777f4e50463bb335b3ff0a2d1773c4a5
Size

49KB
MD5

777f4e50463bb335b3ff0a2d1773c4a5
SHA1

c5019741ffdad1f93c0c18ca724d659596a4b554
SHA256

9233bd5881d941f94c009ccef9fbcd43dc12bf4a3601cc7d39d045060f25763e
SHA512

a3fef10d76a9deb34612be7e81b9a43420bf98e5ae6305a2b6f7109017856d74e1c20645919d4a81924271ebf09d1c5efb0e5720be7da587fe80908d81f43cf2
SSDEEP

1536:NRmfr5xgpG1KyVz+yxv0omSX8/x96sdrrk9:NRHG1jl+s0ox8/uWfk9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
777f4e50463bb335b3ff0a2d1773c4a5

Files

777f4e50463bb335b3ff0a2d1773c4a5
.exe windows:4 windows x86 arch:x86

2fb5ed2dce214f61d2cdd1ca15760a99

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

oleaut32

SysFreeString

advapi32

RegCloseKey

user32

CharNextA

Sections

.text
Size: 46KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adong
Size: 17B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE