b77a406dfbb491514e467bd39aea493b464c5e133c3917172201afd59f09df05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b77a406dfbb491514e467bd39aea493b464c5e133c3917172201afd59f09df05
Size

181KB
MD5

8578e681955a3e697c0754aad7c33e87
SHA1

aab960f821a3e103fb6a4885be98212d8f32036f
SHA256

b77a406dfbb491514e467bd39aea493b464c5e133c3917172201afd59f09df05
SHA512

2a54b73411ab5780606a9db1c28d4ad6e27bb6973f84d105334353bcab44eb763fe3d5c05472e6a450ceb97d789f747da38cd31d705d056f800d7380c59015f3
SSDEEP

3072:GvyOZBYEVC8KSB5pwcaFixj+dBeMOvm7vgTvepa7NqOV4v1yQ7pEod30Cv1YRIC9:G9ZBvcStvaFXbmm7vPwZX4tyQNEo4IC9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b77a406dfbb491514e467bd39aea493b464c5e133c3917172201afd59f09df05

Files

b77a406dfbb491514e467bd39aea493b464c5e133c3917172201afd59f09df05
.exe windows:1 windows x86 arch:x86

8a9e38cf5aef33aa05eddf0f4b8f4b9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateFileMappingA
GetCommandLineA
GetDriveTypeA
GetTickCount
MapViewOfFile
SetErrorMode
Sleep
UnmapViewOfFile
VirtualAlloc

user32

MessageBoxA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

Sections

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE