b7763040ec2da48d0c522fd10d67ed52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7763040ec2da48d0c522fd10d67ed52
Size

436KB
MD5

b7763040ec2da48d0c522fd10d67ed52
SHA1

a9ae41751511cb7e131d9a0566c56194195907ff
SHA256

3ca61c0588c33dc6be0ead92597f4677c5d560ce00d754a18e0945bc9f1fd20e
SHA512

c27349fadf9dee1060b820e5ae166d29ed7fbe44d21355d85cfeb156b70635abba692c76f58cbd02d8ba2cf47dbff027d642e4b5f4eed726415ee0dde71337aa
SSDEEP

12288:WpzrZZMlmU2maBmuhYpzcm55teE/ruzjS3tg:8zrT/UpuK75DeE/ScW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7763040ec2da48d0c522fd10d67ed52

Files

b7763040ec2da48d0c522fd10d67ed52
.exe windows:4 windows x86 arch:x86

8bd9250f5508af625aefc19337b6f8f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

MakeSelfRelativeSD

ntdll

RtlPcToFileHeader
RtlRunEncodeUnicodeString

oleaut32

SafeArrayGetVartype

kernel32

GetUserDefaultLangID
GetCurrentThread
GetCurrentThreadId

Sections

.text
Size: 431KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 341B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE