4d77b06f168b586f5f02f25c03d20cfea6764e179769d74e01a82eaa78fa7e7a | Triage

Sharing

General

Target

4d77b06f168b586f5f02f25c03d20cfea6764e179769d74e01a82eaa78fa7e7a
Size

91KB
MD5

0c72a0ccbda25535c4502b4dc3d16849
SHA1

10d96b5ffe26a5f4e4ab5dbbdebf4b32f7ae0ea2
SHA256

4d77b06f168b586f5f02f25c03d20cfea6764e179769d74e01a82eaa78fa7e7a
SHA512

1f6d482c9f55ebc1e9b24f45f422f0cf43784f29e2967dee3c6be7e41fdb5892cd95ef89a161a6ad58dd4609eb6bf83630ec1278655ccd13cf6cd4ba926e6a65
SSDEEP

1536:gi5jVchT8cuvgTfD/ay53Ma3QrAjw9e8Cy/6:9vc7IgrD/ayNUe8Cy/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d77b06f168b586f5f02f25c03d20cfea6764e179769d74e01a82eaa78fa7e7a

Files

4d77b06f168b586f5f02f25c03d20cfea6764e179769d74e01a82eaa78fa7e7a
.exe windows:5 windows x86 arch:x86

44e7af86d13bd689602e96dccc077d31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
lstrcatA
GetModuleHandleA
ExitProcess
MoveFileExA
WaitForSingleObject
GetModuleFileNameA

user32

CopyIcon
SetSystemCursor
LoadCursorA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ