77fb041dbf2904518f19c5516d833dfd01fd0c6a3f773abbb98a0ca1db5140bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77fb041dbf2904518f19c5516d833dfd01fd0c6a3f773abbb98a0ca1db5140bb
Size

12.5MB
MD5

0faa3b6c72f9f4ae7cc68e84d2a3a729
SHA1

c290fbfa81aa400ea579335f71f311cabc994817
SHA256

77fb041dbf2904518f19c5516d833dfd01fd0c6a3f773abbb98a0ca1db5140bb
SHA512

1f7bab3b51514d8a3dcd18c6f96ab3a942dc7adb4844d93ebf3d7bba52daf7789bc2162aec0a49a9108590d28803b43c6bbb2d098a10bbdfb0c9fc9b0ff700d1
SSDEEP

393216:NkbqDGMLCXVOhzCED6J83a10HXdwWFtNITfZW:CbqJLCFOhzCEDIEaotwetNi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77fb041dbf2904518f19c5516d833dfd01fd0c6a3f773abbb98a0ca1db5140bb

Files

77fb041dbf2904518f19c5516d833dfd01fd0c6a3f773abbb98a0ca1db5140bb
.exe windows:5 windows x64 arch:x64

58195c87a65d5d06bea9db79b004b909

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

CreateWindowExW

comctl32

ord380

kernel32

IsValidCodePage

advapi32

OpenProcessToken

gdi32

SelectObject

iphlpapi

GetInterfaceInfo

msvcrt

_wcsnicmp

psapi

GetMappedFileNameW

shell32

SHGetFolderPathW

Sections

.text
Size: 145KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ