771d48c89b585c4d840ba1a7af63f860896e7bfddac2f743609788588a5b4b80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

771d48c89b585c4d840ba1a7af63f860896e7bfddac2f743609788588a5b4b80
Size

76KB
MD5

7c40a8d7ff9dbf4c4129133e36c9b3ce
SHA1

0d7d1662ca964e6d56bd0654bd2692974b7b68bf
SHA256

771d48c89b585c4d840ba1a7af63f860896e7bfddac2f743609788588a5b4b80
SHA512

6d460c628b27f23bdacbfd893e34951112d29b35960990b031e4774fa2cd755718104b9ca994863cfc08789cafd7dbda597dcf084254c0fb5b0aa3e08dbb7588
SSDEEP

1536:4579ucrFmJQqO3VhDWiC+i6QAbcDM48tcMw0M:IxmJQqO3VpWiC+i6QAU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
771d48c89b585c4d840ba1a7af63f860896e7bfddac2f743609788588a5b4b80

Files

771d48c89b585c4d840ba1a7af63f860896e7bfddac2f743609788588a5b4b80
.exe windows:5 windows x86 arch:x86

64ae6f7ad7b9fe42fe92f6ebc5207506

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCloneImage
GdipDisposeImage
GdipFree
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdiplusStartup
GdipCreateFromHDC
GdipAlloc
GdipGetImageWidth
GdipGetImageHeight
GdipBitmapGetPixel
GdipDeleteGraphics

kernel32

LoadLibraryExA
HeapAlloc
lstrcatW
OutputDebugStringW
LoadLibraryA
LoadLibraryW
FindResourceW
LoadResource
SizeofResource
LockResource
VirtualAlloc
VirtualFree
FreeLibrary
GetProcAddress
GetCurrentProcess
GetProcessHeap

user32

ReleaseDC
BeginPaint
GetDesktopWindow
EndPaint
wvsprintfW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ