877c26d020fad709dba0f301f87b8955 | Triage

Sharing

General

Target

877c26d020fad709dba0f301f87b8955
Size

76KB
MD5

877c26d020fad709dba0f301f87b8955
SHA1

9fe2f6d789ab5da2fc002fc25802d4fba1fca0b6
SHA256

897a25c05cecaf48cb0b64644a7a9395a6e1d4419e56645a030c8f31af56f284
SHA512

93cadb6b34a0287a10a416589aa1c32ef0328fcc00e0228479690b3a544a0570ca32a980b4d1187c57d3b35999a60c77a0762de855ff49dfd392f8b78ed05f13
SSDEEP

1536:5xCTVAiOvwmiOz0dtIqWOxB78xxiiIPRjCYpjVrs2ryrd1vUQuq6:rRiiwmLzaOqlp8WiI52YHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
877c26d020fad709dba0f301f87b8955

Files

877c26d020fad709dba0f301f87b8955
.exe windows:4 windows x86 arch:x86

b80f5178514fca924ec6e6dfb98d8a7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetTempPathW
DefineDosDeviceW
SetCommBreak
EnumTimeFormatsA
ReplaceFileA
GlobalFindAtomW
CreateMemoryResourceNotification
GetTimeFormatA
ActivateActCtx
RestoreLastError

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE