9766e7ddc378b7065a9e65358e33eb8a | Triage

Sharing

General

Target

9766e7ddc378b7065a9e65358e33eb8a
Size

19KB
MD5

9766e7ddc378b7065a9e65358e33eb8a
SHA1

786eb85a966bd54e5ecceaf00e30d99acbe7f79c
SHA256

6e431c7aee915cce561fe3aed14986d8896bd896c6293a3cfddf833cc0e75e22
SHA512

f07c7e1ad785d396792ee37271ca563f68baee894130028b33f0e1fa04acb613639aa5646dbe5f6c533ec228d5b651520aef29697dac295c7905e181c043979f
SSDEEP

384:5HELvrNTsqTmmFCe46gI5xVtv4i6zz1NzzV6qZ9zhYQoW9:5HKvBbTmmAe9xV5j6FNzz3zhYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9766e7ddc378b7065a9e65358e33eb8a

Files

9766e7ddc378b7065a9e65358e33eb8a
.exe windows:4 windows x86 arch:x86

22bda659578d1e1503dd8be5471186da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
GetCurrentThreadId
InterlockedExchange
SetHandleCount
SetConsoleCtrlHandler
LeaveCriticalSection
LoadLibraryA
EnumSystemLocalesA
GetCurrentDirectoryA

msvcrt

srand
_wcslwr
wcscpy
strlen
_strtime
__setusermatherr
free
_itoa
_vsnwprintf
_except_handler3
_wcsicmp
_beginthread
_stat
_snwprintf
_wctime
exit
__mb_cur_max
wcsncmp
ftell
_isctype
wcscmp
memcpy
realloc
strspn
atol
_wfullpath
_wsplitpath
fseek
_initterm
strtoul

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ