77e523bba5c13c47b8929f82d861c202 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77e523bba5c13c47b8929f82d861c202
Size

128KB
MD5

77e523bba5c13c47b8929f82d861c202
SHA1

b04c30bd7afb82cc72ce91589d9a1c634b1b781d
SHA256

9e1a782a4989577617b430e0bc8afcad9518d01e166cbf399de5d1ff6bebbfda
SHA512

f8418d63e74179f8d8c162c74b31e34db42476bb62458e8ff9b4d3fd36fdbf4cafd6e7651ee801950407c6ee7b823ca7e09abbc952f455a2c615d8f9c18468b4
SSDEEP

1536:XuRW70D8W62/mT8mpPOlhC+wnDHlfwgsbUspIw9Ny88LUeZmOMTGXCiCJ:+RW7t2/g8m1SchkIqn84eZvRSiCJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77e523bba5c13c47b8929f82d861c202

Files

77e523bba5c13c47b8929f82d861c202
.exe windows:4 windows x86 arch:x86

3339231a785321abc771aa79e771ca13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
ExitThread
GetModuleHandleW
lstrlenW
GetCommandLineA
GetModuleHandleA
IsBadReadPtr
GetLastError
GetCommandLineW
LoadLibraryExA
GetProcAddress
IsBadHugeReadPtr
VirtualAllocEx

Sections

CODE
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ