77c76ffda410bb9afb2d33e61f6c6032

General

Target

77c76ffda410bb9afb2d33e61f6c6032
Size

26KB
MD5

77c76ffda410bb9afb2d33e61f6c6032
SHA1

615421801aa7b9de4f26651d383c50cf9685e012
SHA256

a14d080283f1e7b019be5da9de536a3cec2e151caf2ccba25372e55baebee7db
SHA512

ea7a9796895ffa9366b5a92c3ac7f5e358e9706bbcd2779962ad20886da70c910fd3f645c0e74340776cd931c9a22199c01d583fcfe2744d7f84ce8655f3c799
SSDEEP

384:diob9ZdgReTHjr/AsBmlc9lSocuTSxqUoryy1qi61Rp8RirloZuCQPON9Le:dzIajcs28SR0y2qvRp8ROloRw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77c76ffda410bb9afb2d33e61f6c6032

Files

77c76ffda410bb9afb2d33e61f6c6032
.exe windows:4 windows x86 arch:x86

cc877af1f2f4c887682590e3f95bfc0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
WriteFile
DeleteFileA
ReadFile
CloseHandle
GetFileSize
CreateFileA
CreateThread
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetACP
GetCPInfo
RtlUnwind
CopyFileA
CreateDirectoryA
GetWindowsDirectoryA
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
Sleep
WinExec
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetStringTypeW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
lstrcpynA
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc

user32

wsprintfA
ShowWindow
UpdateWindow
DispatchMessageA
TranslateMessage
GetMessageA
LoadIconA
GetDesktopWindow
CreateDialogParamA

advapi32

RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA

wsock32

sendto
socket
WSAStartup
ioctlsocket
htons
connect
recvfrom

ole32

CoInitialize
CoCreateInstance

shell32

Shell_NotifyIconA

comctl32

InitCommonControlsEx

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc877af1f2f4c887682590e3f95bfc0d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wsock32

ole32

shell32

comctl32

Sections

.text Size: 20KB - Virtual size: 19KB

.data Size: 5KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 240B

.text
Size: 20KB - Virtual size: 19KB

.data
Size: 5KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 240B