f77ce62ea083e7029d9a4b48515c67914a5fe07eda9fff2b6236a430f126cd43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f77ce62ea083e7029d9a4b48515c67914a5fe07eda9fff2b6236a430f126cd43
Size

181KB
MD5

0439501beff326de707ad4b3d839d5ff
SHA1

2025aeabfb218a0bf11a14a82e8cf81a16d54323
SHA256

f77ce62ea083e7029d9a4b48515c67914a5fe07eda9fff2b6236a430f126cd43
SHA512

aaa9d83f5c99ee1259a35e9eb4437a7c5fd0a84939e386cc2c59902b0aba6739bda39d38a40ca5d266c789389c6254a888d8fbc01ebd79682e62b4746706b400
SSDEEP

3072:mVOVK9crNdChBpaHwHjHDgy5fpjUthLI60ttH8Ra4KvqDUhYJ9f6zfvLsSiS:gq5dkpaHwH7kyzjUCttH8Ra7vNQoznLL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f77ce62ea083e7029d9a4b48515c67914a5fe07eda9fff2b6236a430f126cd43

Files

f77ce62ea083e7029d9a4b48515c67914a5fe07eda9fff2b6236a430f126cd43
.dll windows:4 windows x86 arch:x86

c59bef6c2a3691b4b6e6254b06590a86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

mfc42

ord5356

msvcrt

strcspn

user32

wsprintfA

advapi32

LookupPrivilegeValueA

ws2_32

socket

shlwapi

PathIsDirectoryA

ole32

CoSetProxyBlanket

oleaut32

SafeArrayUnaccessData

msvcp60

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

netapi32

Netbios

Exports

Exports

InputFile
PrintFile
WriteErrorLog

Sections

.text
Size: 160KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE