b77a8eef08e32bf5cf1e0432a856920b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b77a8eef08e32bf5cf1e0432a856920b
Size

188KB
MD5

b77a8eef08e32bf5cf1e0432a856920b
SHA1

9a089533d492d403842066bd4eab8b1ddf938b6b
SHA256

72d48de02715f04a645e4434219ef005f097593e369098a467ac6cd91e00f6a7
SHA512

668aa2eda7634012a3d9e5d45971018e9e7e4bc0fe8bd8a06b1e3c2e22197548fa748867f6e44c4b2febc3fe5388a0a107a0323f032323febabecbc7b4f157af
SSDEEP

3072:d5eaoUPFy2h7XDt5baiBKsvqk7/5OFzFkozknz6Dpmgvjp3Vt8h4fRWe:rUohDDt5TV1T5OjkG2Ym+DU4fRWe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b77a8eef08e32bf5cf1e0432a856920b

Files

b77a8eef08e32bf5cf1e0432a856920b
.exe windows:4 windows x86 arch:x86

0a34bbdac649c8fb321020077b34727e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
LocalFree
LocalLock
GetACP
FindClose
TlsGetValue
LoadLibraryExA
GetConsoleAliasA
FindAtomA
GetCalendarInfoA
FreeEnvironmentStringsA
WaitForSingleObject
CreateFileA
LocalUnlock
GetLastError
IsDebuggerPresent
HeapCreate
CreateFileMappingA
CloseHandle
GetModuleHandleA

user32

DefWindowProcA
GetDC
DispatchMessageA
CallWindowProcA
ScrollWindow
GetIconInfo
IsWindow
SetFocus
CreateDialogParamA
GetMessageA
PostMessageA
CascadeWindows
GetDlgItem
DrawIconEx

msasn1

ASN1BERDecCheck
ASN1BEREncFlush
ASN1BERDecBool
ASN1BERDecEoid
ASN1BEREncLength

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ