03bc76e3c468026716d000f262b7e7026116b6eebadff0ee5c0290cd65174d30 | Triage

Sharing

General

Target

03bc76e3c468026716d000f262b7e7026116b6eebadff0ee5c0290cd65174d30
Size

76KB
MD5

1da8bf3386c0e26fad4f7de69fecb6ba
SHA1

4e7d37c82a89ee110b8d96aec52a847b52c64466
SHA256

03bc76e3c468026716d000f262b7e7026116b6eebadff0ee5c0290cd65174d30
SHA512

e9f9e549ec401723d34f99c0e1324365d4ccf22da3fe470266905602a1cad9afd268a3952b50b4ce0c3b50e4684e0b5d72130a17aa3f738ed8f252f254c3adc0
SSDEEP

1536:9IguCuEFofsgN4SyzQEH7/x6WVKi3R+EVj4i8GtpjVrs2ryrd1vUQuq6:iguCuEFoEgqzcqHh3DRHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03bc76e3c468026716d000f262b7e7026116b6eebadff0ee5c0290cd65174d30

Files

03bc76e3c468026716d000f262b7e7026116b6eebadff0ee5c0290cd65174d30
.exe windows:4 windows x86 arch:x86

2f205e2f1252664a41e5f5d9413408a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
lstrcmpi
CancelWaitableTimer
RemoveLocalAlternateComputerNameW
MoveFileExA
GetConsoleAliasesLengthW
CreateFileA
ExpungeConsoleCommandHistoryW
GetProcessWorkingSetSize
FindResourceW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE