77b797001503946a1220e2d6aac917c4 | Triage

Sharing

General

Target

77b797001503946a1220e2d6aac917c4
Size

76KB
MD5

77b797001503946a1220e2d6aac917c4
SHA1

ca4de1b7dcabe99df0a290c557617f90a49b6992
SHA256

6f50050559d977fbe5a4768684639cc9895ef75ad9ee58d23223768baac08ddc
SHA512

b816bad9ee4378bdd0bb85ba702e68db9bd8a4e90bfb437bb4c62259ef8fe3ee09bbbbdcb12cb93411722bff9c3c0a747b2b825eb26f0a5f3f926976eafc4689
SSDEEP

1536:s5jqSoKhCN/GEo1f/Fa2vaBmxKCE4+rSKz8FPfbpjVrs2ryrd1vUQuq6:2jqSB/EWJvaBmxKj5OxPTHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77b797001503946a1220e2d6aac917c4

Files

77b797001503946a1220e2d6aac917c4
.exe windows:4 windows x86 arch:x86

edd8f110de99b19adea60aa6d5188fa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
EnumSystemLanguageGroupsW
lstrcpynW
CreateHardLinkA
SizeofResource
GetVolumeNameForVolumeMountPointW
ReadFile
ScrollConsoleScreenBufferW
VirtualFree
WaitNamedPipeA
SetThreadAffinityMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE