76c611ab6c10f2741ddb2b091d8d58b855e48b4a3b212dc6a7cca6bd0236427f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76c611ab6c10f2741ddb2b091d8d58b855e48b4a3b212dc6a7cca6bd0236427f
Size

897KB
MD5

2ffc1e4cc4a8d689308e8f43e01739f7
SHA1

e9ce1dd793269e4b98d41ae1c44cb1aa9b9a3e36
SHA256

76c611ab6c10f2741ddb2b091d8d58b855e48b4a3b212dc6a7cca6bd0236427f
SHA512

7e7cdc51ad068ffaac1c85933b65c0bd72a88f6096c0e3e30167e2e2c6ddbd1374ad44f7562d59586a1d3eabcd042fe7aa7b714038e665521c9f7b12582f9203
SSDEEP

24576:JAG8BnyUp1yN2ZarelNMEX7sX7yFfLQHcHkx1AOA:J+nZ/eearSNMEX7srMQHgkx1Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76c611ab6c10f2741ddb2b091d8d58b855e48b4a3b212dc6a7cca6bd0236427f

Files

76c611ab6c10f2741ddb2b091d8d58b855e48b4a3b212dc6a7cca6bd0236427f
.exe windows:5 windows x86 arch:x86

ffab3b43079db0e231c45d7878742690

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

CharToOemBuffA

advapi32

BackupEventLogW

Sections

Size: - Virtual size: 40.3MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE