77a54bc3182dd0a5367f8ca8a0146e2a

General

Target

77a54bc3182dd0a5367f8ca8a0146e2a
Size

3.3MB
MD5

77a54bc3182dd0a5367f8ca8a0146e2a
SHA1

a019a3001ae3e3ce4c2930387b3e5868fbe0e799
SHA256

cc6e6bedee60eab17221b641ba79bf855ef49142a1cfa70931bf9153e7933094
SHA512

3885046a763022bdefbb375fa444a23ca141fd6f549ced77de3992242753ca0afa261dfd680cc09756a9d9500b15c6b01c658d80ea400fa2e99cb5bdf217c6d5
SSDEEP

24576:9U4ABbfrCulsgiBWidZvuzh7ZrYXFWb1Ct0l1jATxoWCWiUEzy8Ue0hfI:9ug7ybb1rlVATxAYemfI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77a54bc3182dd0a5367f8ca8a0146e2a

Files

77a54bc3182dd0a5367f8ca8a0146e2a
.exe windows:5 windows x86 arch:x86

19da9c5e2a838a0fa8bc88c9a1bd1f69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
EnterCriticalSection
GetThreadLocale
GetCommandLineW
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
LoadLibraryW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapFree
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
WideCharToMultiByte
HeapSize
HeapAlloc
HeapReAlloc
IsProcessorFeaturePresent
LCMapStringW
MultiByteToWideChar
GetStringTypeW

psapi

GetMappedFileNameW
EnumDeviceDrivers
GetDeviceDriverFileNameW
GetModuleFileNameExW

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19da9c5e2a838a0fa8bc88c9a1bd1f69

Headers

File Characteristics

Imports

kernel32

psapi

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 1.4MB - Virtual size: 1.4MB

.data Size: 3KB - Virtual size: 6.1MB

.rsrc Size: 25KB - Virtual size: 28KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 3KB - Virtual size: 6.1MB

.rsrc
Size: 25KB - Virtual size: 28KB