77aabe7ce424cd9d06de3caf7686ccb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77aabe7ce424cd9d06de3caf7686ccb9
Size

45KB
MD5

77aabe7ce424cd9d06de3caf7686ccb9
SHA1

f84971dc30a0a5aca312b3f958cf458b4cfaf52e
SHA256

b03729949de09bfb2157f48fec72a19f32ff0b857183db87110ffd39f326576c
SHA512

d225e025004af6163387ce08f17965e90453e3c0659f527ad83a8b41db08f225242e66a6ece473f64a36743a3b3fd6fe02d5bde5d17297b7268d5eed9695040a
SSDEEP

768:G9CDTA2XHgq/GcEYV4bcvo4kId08WgsioxbzPy/riA+iNGdaP7L5wFr4:G96TA2bMZbG7kVjxiUC/PhbPv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77aabe7ce424cd9d06de3caf7686ccb9

Files

77aabe7ce424cd9d06de3caf7686ccb9
.exe windows:5 windows x86 arch:x86

d5ddef611c360830930cbf0874c3e3d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptReleaseContext
RegCloseKey
CryptGetHashParam
CryptCreateHash
DuplicateTokenEx
RegDeleteValueA
RegQueryValueExA

shlwapi

PathMatchSpecW
PathRemoveFileSpecW
wnsprintfA
PathFindFileNameW
PathFileExistsW
StrCmpNIA
PathCombineW
StrCmpNIW
StrStrW
wnsprintfW
SHDeleteKeyA
wvnsprintfA
wvnsprintfW

Sections

.qtipcf
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cbgt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jah
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ