777f9fe35428fb614efcf949abdd22ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

777f9fe35428fb614efcf949abdd22ee
Size

51KB
MD5

777f9fe35428fb614efcf949abdd22ee
SHA1

bb403f20b3ca591781c0840ca78d76657bd8696e
SHA256

5b2886d0d5379a7fd03c694f0430d9b58cbd339e3d42ac4b99d06a58da95e7c7
SHA512

72b0b3c1a16034fd40debbeb3e991dea35af0024c4c7110aaf1f4afa63e9136665ae2786d0c8006974977a6adea8f7e82d4d5d71d5facb4b6f8f5f15b2f5fd13
SSDEEP

1536:xJKmdWvMSrlCFyapH93CKy72ZCoN224GOPIw:xJKmdWvMYCFL93xbylPI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
777f9fe35428fb614efcf949abdd22ee

Files

777f9fe35428fb614efcf949abdd22ee
.exe windows:4 windows x86 arch:x86

a5d00d80c9bf475144b42960d0a03b96

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
ExitProcess
GetCPInfo
GetFileAttributesExA
GetPrivateProfileSectionNamesA
IsValidCodePage
LoadLibraryExA
LoadResource
SetTimeZoneInformation
VirtualAllocEx

advapi32

ConvertAccessToSecurityDescriptorW
CryptAcquireContextW
GetAuditedPermissionsFromAclA
LookupAccountSidW
RegOpenKeyA
RegUnLoadKeyW
SetAclInformation
SetEntriesInAclA
SetPrivateObjectSecurity
SetServiceObjectSecurity

user32

AnyPopup
CharLowerW
ExcludeUpdateRgn
GetCapture
GetClassInfoExA
GetIconInfo
GetPriorityClipboardFormat
RegisterClipboardFormatW
SetWindowRgn
ShowWindowAsync
UnloadKeyboardLayout

shell32

CheckEscapesA
CommandLineToArgvW
DllGetVersion
ExtractIconExA
ExtractIconResInfoA
FindExeDlgProc
SHBrowseForFolderW
SHFormatDrive
SHGetDataFromIDListW
SHGetMalloc
SHGetSpecialFolderPathW
ShellExecuteEx
ShellExecuteExA
Shell_NotifyIconW

gdi32

CreateScalableFontResourceA
EqualRgn
GetBitmapBits
GetNearestColor
PatBlt
StartDocA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE