77924e24f912b28ed100123e541b1f6b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77924e24f912b28ed100123e541b1f6b
Size

54KB
MD5

77924e24f912b28ed100123e541b1f6b
SHA1

20da8dfe92a9babb59384d4df04888cac84d12d2
SHA256

90a5b29faba9a79d93f32e29d13d23c67a852ecf5c402f404a0a6c28263c4a32
SHA512

57f706d77cf5cf1f482c31d3affc26f7c4b6b3df3776b028ba6213cd96fcbabf685acddf9c789d3d05124368172aa890c1f7bbcdc6f4caea751b8be637fd68fc
SSDEEP

1536:gQ7Uv00YEHGTYZzyh9/TNtfQUgNNVNJlky:gQ70YEFzgZTNXkiy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77924e24f912b28ed100123e541b1f6b

Files

77924e24f912b28ed100123e541b1f6b
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 44KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE