00f09d17ac1d9bd898961656979b939c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00f09d17ac1d9bd898961656979b939c
Size

244KB
MD5

00f09d17ac1d9bd898961656979b939c
SHA1

cb39120ce0a79a5b06f1f61bcff9a11ddef53817
SHA256

c25d49e2d6ba54ea9a08db54794f4a9c73f64f8e24f861b91dc8a4e3161dd12e
SHA512

9b48da4f4d69a816b11bfa2f6914522e65753a4ef237b24b9338e7586c37b8fc61aad73e89f996fcb6ef9bdf6f654bdf21b1dbadedc9d42748d665789bd4e8bc
SSDEEP

6144:DA+Hr0KViequnfq/dJDrQMjlT+KG5xPb3tTCcsU:U+L0KUehMdJDpTpG7JTCcR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00f09d17ac1d9bd898961656979b939c

Files

00f09d17ac1d9bd898961656979b939c
.exe windows:4 windows x86 arch:x86

8f24b3c0b7e841eeb514c3589bfe0fa7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GetModuleHandleA
GetVersionExA
GetCommandLineA
GetFileSize
CloseHandle
LocalFree

gdi32

GetTextMetricsA
SetROP2
SelectObject
ExtTextOutA
SetPixel
GetTextColor
GetBkColor
PatBlt

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 233KB - Virtual size: 823KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ