b76d14fd655748a8e850a86389a4267d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b76d14fd655748a8e850a86389a4267d
Size

168KB
MD5

b76d14fd655748a8e850a86389a4267d
SHA1

b49925d405b66da1e415aba575dd38402c338ffb
SHA256

8b9f0a36bfc71bcb6238c0fa74d92063cbed4ee43f3ab18d8e0bf44d0d6ea844
SHA512

f56755935e171c31dcfc558fdb916d77c92170e0e9d68ea75e9e18f77c96f80412eda8f0acebc015cd970cdfe6e019a18643584fef5abe0a52c2acb4dec76698
SSDEEP

3072:mdpQWuA0Z1AInOCaO93O28kLaUeYTcLIPJYJR1L4V5ZIXS40:dW8AzCFhO3kL5Tuk+z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b76d14fd655748a8e850a86389a4267d

Files

b76d14fd655748a8e850a86389a4267d
.exe windows:4 windows x86 arch:x86

52cb7a92779863d102875b519dae7c6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSectionAndSpinCount
GetCommTimeouts
OpenJobObjectW
InterlockedExchange
GetCPInfoExW
GetSystemDirectoryW
SetCriticalSectionSpinCount
UnregisterConsoleIME
GetCPInfoExW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ