77b348da06a0c2641869a32efc66eb17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77b348da06a0c2641869a32efc66eb17
Size

209KB
MD5

77b348da06a0c2641869a32efc66eb17
SHA1

5345093ea456e725118673b785a94bdeeefdc9cc
SHA256

50c173b2538b09508d49a89ed2fb23c50519b5c56d072b371162def0a395bd7c
SHA512

51bb58c8c5ac34ed2555ebd1a7a9891d090f0c453eb0e060282d6f88c433652fe0f1783c4e688f55eb7e0a68037ddab7f1bcc1d86486afaa199d9736cc9971ce
SSDEEP

6144:Bl2/rr03K/Kl2CLXdzF/6avCGlYUFyzv4W2RV1:2U3KtCXdzFragYUFa4r1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77b348da06a0c2641869a32efc66eb17

Files

77b348da06a0c2641869a32efc66eb17
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE