e9b513146741397c9731871a5e911239 | Triage

Sharing

General

Target

e9b513146741397c9731871a5e911239
Size

54KB
MD5

e9b513146741397c9731871a5e911239
SHA1

754a8ecace3d3ab6b81c8be7d8d24af31ed91f16
SHA256

99daf146aa2489ced5e8763fa5c5de67019de80369383402bd1e422127960fff
SHA512

cdc70846b5824a6db474786579167d3e23830a2cf38c5725a32bd4d08b53eae222c8f5f15c284c65d922b2ca23aef6d19be4c3085a23a966363f3080c6ec1e55
SSDEEP

1536:IuqXk2fJWIIsrxYvaRvNaKMu+/Jj8DT1iy11WZwoQD:Nek0KiR1uu+/Md1bD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9b513146741397c9731871a5e911239

Files

e9b513146741397c9731871a5e911239
.exe windows:6 windows x86 arch:x86

7df2cc31963bd1c43bfd884d35cc70af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
GetProcessHeap
VerSetConditionMask
ExitProcess
VerifyVersionInfoW
LoadLibraryA
GetProcAddress
GetModuleHandleA
VirtualProtect
VirtualFree
VirtualAlloc

user32

MessageBoxA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE