77b754a7482b545389ea0545141b5107 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77b754a7482b545389ea0545141b5107
Size

60KB
MD5

77b754a7482b545389ea0545141b5107
SHA1

3474671415b900a09bac06762bf989cf82acd4bd
SHA256

ef3deba0f89b8218de46b9dec3ab16c1eaf5e727361b3cddb1d2d082c0430d78
SHA512

74d259ed17b7da156b8a35ee6c070b72679271b366469095967dba2e7bc1d1dd5292b43a7a7085637903f56e9fe5691a692f3eb16f1f1ee7e9fb73ba1eb48c1a
SSDEEP

768:W/UT9O/7cXmMIYIutEYK8ts+6FZ/7gGjWKSpXej4YnBSZ:W/kmcfftXq+6FR7gPOj1BSZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77b754a7482b545389ea0545141b5107

Files

77b754a7482b545389ea0545141b5107
.exe windows:4 windows x86 arch:x86

d6b93c2146e14568c9d81a5e92e1efe7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
lstrlenA
lstrcpynA
GetCurrentProcess
HeapFree
GetCurrentThread
Sleep
IsBadWritePtr
lstrcatA
WinExec
GetTempPathA
lstrcpyA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetLastError
GetModuleHandleA
TlsGetValue
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW

user32

wsprintfA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ