9ab0d388e5a3a7c31f3d23499a542c7a12d6687f1ef7f5b91247a3597ce8caca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ab0d388e5a3a7c31f3d23499a542c7a12d6687f1ef7f5b91247a3597ce8caca
Size

17KB
MD5

ab3030c662382d4a98380b1002ca5e1c
SHA1

17451b1d8a1db3fe40edbaf6d6a59ed87130f685
SHA256

9ab0d388e5a3a7c31f3d23499a542c7a12d6687f1ef7f5b91247a3597ce8caca
SHA512

12b8af2fa8bac65da9c9538d032d644f10fe33f87bd7ad168dc38ce8307b9e434db0beb9bf01154c2fd4b81323fc5b9cfa089dda535ae7b2491d030b1adef643
SSDEEP

192:nDqeRwdb3enG2RxnSGzTcb7dYMnW0TYxm2pXEz4JWaULI7kbSHkFQc3psZ/Q99g0:DqzdeGQ/TcFPnW0wp0tekWo5s5eGZvX2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ab0d388e5a3a7c31f3d23499a542c7a12d6687f1ef7f5b91247a3597ce8caca

Files

9ab0d388e5a3a7c31f3d23499a542c7a12d6687f1ef7f5b91247a3597ce8caca
.dll windows x86

655be6d4b6825ae7c96140c054e1ac0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueExW

user32

GetKeyboardType

Exports

Exports

AssembleApplication
AssembleModule

Sections

.text
Size: 11KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE