c76ad6972f8faddae5fd17f3654cd94d | Triage

Sharing

General

Target

c76ad6972f8faddae5fd17f3654cd94d
Size

603KB
MD5

c76ad6972f8faddae5fd17f3654cd94d
SHA1

299f564fe88d1b4a36aab11e864b862043eed825
SHA256

19930c08bb581aba6540bcfe0f561f5dd5a4a498be9930bd529f416d67e7bb46
SHA512

ce803b0f446a328271f82cde511e35880d9bb744d24cd961863c5c1477b84a992f26e7b8b33016457e095cca13a0662b0000655e38d014f7f62d64f7dae2f197
SSDEEP

12288:1z+E4EDqyjkl4EvzmSYlMT8ibZkBd9c0HwS/LX4wzmKBK:N+cjO4E7mSVT8il09LX3y7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c76ad6972f8faddae5fd17f3654cd94d

Files

c76ad6972f8faddae5fd17f3654cd94d
.exe windows:1 windows x86 arch:x86

a7888b3ca5992ff044183ddaf44f703c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeLibrary
GetCommandLineA
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
CreateFileA
ReadFile
ReleaseMutex
RtlUnwind
SetFilePointer
CreateMutexA
WriteFile

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

crtdll

__GetMainArgs
atoi
exit
memset
raise
signal
sprintf
strcat
strchr

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 94KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 940B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE