77d8e02ba49decf7d8827b27c0ce2ed8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77d8e02ba49decf7d8827b27c0ce2ed8
Size

10KB
MD5

77d8e02ba49decf7d8827b27c0ce2ed8
SHA1

62854f2bdf54ec6a7009d064a370c0d64ac64617
SHA256

a4076aa0f3ef13181ab8dcfe97bf6e8bf8e3e1ef16537641e1eaebca30d5d47e
SHA512

ad4a0850fcaf0606417d2094a2cf914f7159c36a4192c2af4371ccbf7fe3100a43e0669165b883b8d64c64b260b1751b44d14309b9340b62692a467fa0a1564f
SSDEEP

192:5kHbXGdamsUkl2hlx4xN0jWuvCzCh1Ls0DG9g5fz8o53mB+u:yRl2hlx4xu7aehBJ8o5Q+u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77d8e02ba49decf7d8827b27c0ce2ed8

Files

77d8e02ba49decf7d8827b27c0ce2ed8
.exe windows:4 windows x86 arch:x86

6f640f78267f0449d4ba995b2da22813

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

_sleep
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
atoi
exit
fflush
fprintf
fputc
free
fwrite
malloc
printf
puts
setbuf
signal
strchr
strerror
time

ws2_32

WSAGetLastError
WSAStartup
closesocket
gethostbyname
htons
inet_addr
inet_ntoa
recvfrom
select
sendto
socket

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE