77c1b51f7c0020db75cde64a198c51fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77c1b51f7c0020db75cde64a198c51fc
Size

1.4MB
MD5

77c1b51f7c0020db75cde64a198c51fc
SHA1

2b78d1877a3a1ade1cfef194ec30d63980f70280
SHA256

ca6f47059bdb69af65f6328d44a072a3599e0431627614aae3fa28c3ad8fe213
SHA512

e3823722979fbfd158f89e187e3d8e9c8097c28ef0cd9a233c56543b2bb0e047d3cf183a4f117a33a526f965ab4eec07cf084b350fbc2bbf6965bf8dfc6ce902
SSDEEP

24576:wAyiLRe+WvsLXxUnlcolGzTQi7b6COTwcbP24u6iPyVm9Z/XkN4fBGjjg:sY4mXG9lUh7xQwcbP24uOVm9ZcN4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77c1b51f7c0020db75cde64a198c51fc

Files

77c1b51f7c0020db75cde64a198c51fc
.exe windows:4 windows x86 arch:x86

2939019b3e1c9516282f24ae4f08a1e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
ExitProcess
TerminateThread

msvcrt

_eof
_chkesp
_ctype
_except_handler2
_CItanh

advapi32

CloseEventLog
CryptGetHashParam
AdjustTokenGroups
CryptSetHashParam
DeleteAce
DuplicateToken

Sections

.text
Size: 273KB - Virtual size: 443KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 154KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 856KB - Virtual size: 856KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE