77ba34f450e9a293600b76082b4dcc02b13e52106438ecb2e7c5df3e79ebb6f4

Sharing

Copy URL Twitter E-mail

General

Target
77ba34f450e9a293600b76082b4dcc02b13e52106438ecb2e7c5df3e79ebb6f4
Size 234KB
Sample241111-gmffdstgrp
SHA256 77ba34f450e9a293600b76082b4dcc02b13e52106438ecb2e7c5df3e79ebb6f4
MD5 4b62e38c170a58686426c5eb1c1953b5
SHA1 fe02b734fe0eb97a2ed2a08b8b871dec86fe106d
SHA512 64124ebfc9a1bf83c7ae0279187595d3138290dea372f392248d91623d085e2a3289ae94bc772cadafc89bea14b92f5e4ef892704622b3a79408bed1c620616c
SSDEEP 3072:Y7P8j/9HLGhUCAClkcax3/lmgRwKYrK/75RuiAVTj5eIPlrpaf:Y7kvIYO3KYrK/rdAJ5en
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77ba34f450e9a293600b76082b4dcc02b13e52106438ecb2e7c5df3e79ebb6f4

File Explorer

77ba34f450e9a293600b76082b4dcc02b13e52106438ecb2e7c5df3e79ebb6f4

.exe 234KB

77ba34f450e9a293600b76082b4dcc02b13e52106438ecb2e7c5df3e79ebb6f4

IMPHASH 7d51a0fa85348bca6694d055fb9a732d
SHA256 77ba34f450e9a293600b76082b4dcc02b13e52106438ecb2e7c5df3e79ebb6f4
MD5 4b62e38c170a58686426c5eb1c1953b5
SHA1 fe02b734fe0eb97a2ed2a08b8b871dec86fe106d
SHA512 64124ebfc9a1bf83c7ae0279187595d3138290dea372f392248d91623d085e2a3289ae94bc772cadafc89bea14b92f5e4ef892704622b3a79408bed1c620616c
SSDEEP 3072:Y7P8j/9HLGhUCAClkcax3/lmgRwKYrK/75RuiAVTj5eIPlrpaf:Y7kvIYO3KYrK/rdAJ5en
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection FreeConsole FreeLibrary GetCurrentProcessId GetLastError GetModuleHandleA GetProcAddress GetProcessHeap GetStartupInfoA InitializeCriticalSection LeaveCriticalSection LoadLibraryA SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery

msvcrt

__getmainargs __initenv __p__acmdln __p__commode __p__fmode __set_app_type __setusermatherr _amsg_exit _cexit _initterm _iob _onexit abort calloc exit fprintf free fwrite malloc memcpy signal strlen strncmp vfprintf

user32

AppendMenuA CallWindowProcA CharLowerBuffA CharUpperA CheckDlgButton CheckMenuItem CheckMenuRadioItem ChildWindowFromPoint ClientToScreen CloseClipboard CreateDialogParamA CreatePopupMenu DefDlgProcA DestroyAcceleratorTable DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA EmptyClipboard EnableMenuItem EndDialog EnumClipboardFormats GetActiveWindow GetClassInfoA GetClientRect GetClipboardData GetCursorPos GetDlgItem GetDlgItemTextA GetMenu GetMessageA GetSubMenu GetSysColor GetSystemMenu GetWindowPlacement GetWindowRect InsertMenuItemA InvalidateRect IsDialogMessageA IsDlgButtonChecked IsMenu KillTimer LoadAcceleratorsA LoadCursorA LoadIconA MessageBoxA MoveWindow OpenClipboard PostMessageA PostQuitMessage RegisterClassA RemoveMenu SendDlgItemMessageA SendMessageA SetActiveWindow SetClipboardData SetDlgItemInt SetDlgItemTextA SetFocus SetMenuItemInfoA SetTimer SetWindowLongA SetWindowPlacement SetWindowTextA TrackPopupMenu TranslateAcceleratorA TranslateMessage wsprintfA

Name

.text

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

356B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

175KB

Virtual Size

175KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

872B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

512B

Virtual Size

175B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

512B

Virtual Size

264B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

512B

Virtual Size

156B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

77ba34f450e9a293600b76082b4dcc02b13e52106438ecb2e7c5df3e79ebb6f4

kernel32

msvcrt

user32

generic