0376e465cc3abfe4a2d86b68a822ff8f7e966caf3612c89fd7db49aaffe7c470 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0376e465cc3abfe4a2d86b68a822ff8f7e966caf3612c89fd7db49aaffe7c470
Size

66KB
MD5

3709268ad4f87869b80ca3459191aace
SHA1

76efb7286e21419236da5425717d88fe731aa985
SHA256

0376e465cc3abfe4a2d86b68a822ff8f7e966caf3612c89fd7db49aaffe7c470
SHA512

dce6cbc6d14cbcfe2976c4a21a576b2fd48b9347dd7fc2c99b84d1a34f17c9ef7228bbd26207bfc7a504bf488c1af17ccbdf868017f8e49c0a8dae84e3505ad7
SSDEEP

1536:ALSOWQEX9pehynkdeA0k5ML8w/259e/IwbSmD4zi8LriFi:ALrWQq9oQnkdefkSL8wey/zzJ8LW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0376e465cc3abfe4a2d86b68a822ff8f7e966caf3612c89fd7db49aaffe7c470

Files

0376e465cc3abfe4a2d86b68a822ff8f7e966caf3612c89fd7db49aaffe7c470
.exe windows:4 windows x86 arch:x86

48fc79043ef62deeafd61c23192d1866

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
CreateMutexA
GetStartupInfoA
GetStringTypeA
Sleep
GetFirmwareEnvironmentVariableW
GetDiskFreeSpaceExA
BaseCheckAppcompatCache
GetDllDirectoryA
GetSystemDefaultLangID
LocalHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE