77c8380a8a3f3c9781431419bedaa895

General

Target

77c8380a8a3f3c9781431419bedaa895
Size

85KB
MD5

77c8380a8a3f3c9781431419bedaa895
SHA1

cec08c708b044d68fd798dff24f42f3dc4c25e2e
SHA256

8fcbf4787552cc72288236eba622bdd4cbaf9afd6f754d6a7f2c1448672338d9
SHA512

de38ddeaa58a97bbaf586ebee895889e7da39ab3d99847f32499e1ea7ad19a65aa73463c28ce39b9c9cb9b048610827dedd9b8b03f6caa34d346c16877a9da64
SSDEEP

384:8QpmKKS+jqtF92NceQkVKF8z1zbNjCxk8vhqC1m:lm1S+IONcf0hNj+rvhJg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77c8380a8a3f3c9781431419bedaa895

Files

77c8380a8a3f3c9781431419bedaa895
.exe windows:5 windows

a3a642d9845af66356006b2255125649

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

rasapi32

DDMGetPhonebookInfo

glu32

gluBeginCurve
gluBeginPolygon
gluBeginSurface
gluBeginTrim
gluBuild1DMipmaps
gluBuild2DMipmaps
gluCylinder
gluDeleteNurbsRenderer
gluDeleteQuadric
gluDeleteTess
gluDisk
gluEndCurve
gluEndPolygon
gluEndSurface
gluEndTrim
gluErrorString
gluErrorUnicodeStringEXT
gluGetNurbsProperty
gluGetString
gluGetTessProperty
gluLoadSamplingMatrices
gluLookAt
gluNewNurbsRenderer
gluNewQuadric
gluNewTess
gluNextContour
gluNurbsCallback
gluNurbsCurve
gluNurbsProperty
gluNurbsSurface
gluOrtho2D

kernel32

MapViewOfFileEx
GetACP
GetSystemDirectoryA
LocalFree
SetConsoleTitleW
EnumCalendarInfoW
GetFileSize
ReadFile
CreateFileA

msdtcprx

DTC_XaOpen
DTC_XaPrepare
DTC_XaRollback

adsldpc

ADSIFreeColumn
ADSIGetColumn
ADSIGetFirstRow
ADSIGetNextColumnName
ADSIGetNextRow
ADSIGetObjectAttributes
ADSIGetPreviousRow
ADSIModifyRdn

msrating

RatingCustomInit

mtxclu

MtxCluIsClusterPresent

samlib

SamAddMemberToAlias

Sections

.text
Size: 2KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a3a642d9845af66356006b2255125649

Headers

File Characteristics

Imports

rasapi32

glu32

kernel32

msdtcprx

adsldpc

msrating

mtxclu

samlib

Sections

.text Size: 2KB - Virtual size: 32KB

DATA Size: 7KB - Virtual size: 18KB

.rsrc Size: 22KB - Virtual size: 22KB

.text
Size: 2KB - Virtual size: 32KB

DATA
Size: 7KB - Virtual size: 18KB

.rsrc
Size: 22KB - Virtual size: 22KB