c77dd951e3f51156ebe69d79a20cbde3 | Triage

Sharing

General

Target

c77dd951e3f51156ebe69d79a20cbde3
Size

6KB
MD5

c77dd951e3f51156ebe69d79a20cbde3
SHA1

5222f27ff654367c5db09b2b33852b19d735c439
SHA256

4a871680bed99f0ce5e6cc43bd1b34ef3a8cd8074dc4f598f6b390bea7dacd2e
SHA512

017dafb093618e9f53920c565c1dc0c29c26304058f39a288f38b53043455d3195071d7024949a4072e9930cce9359b03cad752ec7d3121307a3f3571d32c5c3
SSDEEP

96:aRQBG2Zuwsrd8QdoSWgiVdfM3fFKdja917CyPsPlPuHsVDI2/:VZuwsrMSWhHfGfFKdKBPslbDI2/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c77dd951e3f51156ebe69d79a20cbde3

Files

c77dd951e3f51156ebe69d79a20cbde3
.exe windows:4 windows x86 arch:x86

7f528b49a14d34fc3e3e0c4c2e86ad61

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleFileNameA
lstrcpyA
GetProcAddress
SetFileAttributesW
GetModuleHandleA
ExitProcess
CreateEventA
Process32First
LoadLibraryA
CreateToolhelp32Snapshot
CompareStringA
lstrcatA
RtlUnwind

advapi32

RegCloseKey
RegLoadKeyA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE