9f7f7c68c773f623b4e7e2dcf100c4f30e82bcedfde5de56d4afb2e2219d6fe9 | Triage

Sharing

General

Target

9f7f7c68c773f623b4e7e2dcf100c4f30e82bcedfde5de56d4afb2e2219d6fe9
Size

17KB
MD5

2a6c6ace2274603ea7d518f3a1a14b40
SHA1

657e9c317985df334258c9594a437b5637a26dba
SHA256

9f7f7c68c773f623b4e7e2dcf100c4f30e82bcedfde5de56d4afb2e2219d6fe9
SHA512

d41bcbd8fbef3ebd418bd44efbf95727150bc653af1708531884fc224b95eeb267fa07dc7fceb365c3f58f024ce9a03fca2bd18c1c15d328f6413ddbad969fba
SSDEEP

192:nDqeRwdb3enG2RxnSGzTcb7dYMnW0TYxm2pXEz4JWaULI7kbSHkFQc3psZ/Q99gF:DqzdeGQ/TcFPnW0wp0tekWo5s5eGZvXD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f7f7c68c773f623b4e7e2dcf100c4f30e82bcedfde5de56d4afb2e2219d6fe9

Files

9f7f7c68c773f623b4e7e2dcf100c4f30e82bcedfde5de56d4afb2e2219d6fe9
.dll windows x86

655be6d4b6825ae7c96140c054e1ac0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueExW

user32

GetKeyboardType

Exports

Exports

AssembleApplication
AssembleModule

Sections

.text
Size: 11KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE