0e77c7bffad42ed5584f728993b8417f9c451fde9fdda28b4f8137417b28337d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e77c7bffad42ed5584f728993b8417f9c451fde9fdda28b4f8137417b28337d
Size

63KB
MD5

3b86fa681718150b0500fe4c0e48c8c4
SHA1

c337078888028bb81cafa5c6301cfa6a60a04981
SHA256

0e77c7bffad42ed5584f728993b8417f9c451fde9fdda28b4f8137417b28337d
SHA512

c38a6ecb99253a7f9acb655472b405a136a1c6cfc7ef3796606d57f8e96db0599c98f50b20e579d573e847c025c8087f9cd7e244d701e8ddbfc2d681a7717b9f
SSDEEP

1536:Pk74nUlN9y4QUqHJ2TlG7WUpRB61e0nKYRhS:NUlNs4UHJseB61dRY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e77c7bffad42ed5584f728993b8417f9c451fde9fdda28b4f8137417b28337d

Files

0e77c7bffad42ed5584f728993b8417f9c451fde9fdda28b4f8137417b28337d
.exe windows:4 windows x86 arch:x86

3e33a3401b2cf4c48dcd976a9641382a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumerateLocalComputerNamesA
K32InitializeProcessForWsWatch
GlobalMemoryStatusEx
CreateThreadpool
BaseThreadInitThunk
InitializeCriticalSectionEx
GetEnabledXStateFeatures
UnregisterWaitEx
FindActCtxSectionGuidWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE