09a1f42a769b69fac61a4a23310ef370 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09a1f42a769b69fac61a4a23310ef370
Size

74KB
MD5

09a1f42a769b69fac61a4a23310ef370
SHA1

2461396c87585207ff9ad44c79df164e55faa938
SHA256

6351ca1379cc3b64fd7c9c3fa54a7e54cb760711ef4fcfeafad082d87ca6bbf1
SHA512

4069467763ff95fd05d2f17a98fabe69aaa8c71743ba4530924a5ebd62131aabbfa4c33ffe8b79bee66a26bcda7cd8a6058db17a1b6dac2ae114c33a00586db3
SSDEEP

1536:5p2zlLK8z5Gr1olTQJJe8UMGU+FX7mEGAHT2VFY4n4nfB7u:b2JLbS1kMJdL+dmEXHT2VFY4ns

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09a1f42a769b69fac61a4a23310ef370

Files

09a1f42a769b69fac61a4a23310ef370
.exe windows:5 windows x86 arch:x86

c3aa5101216f41b2d7beaef4051b945e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCmpLogicalW
StrCmpNIW
ord155
PathStripToRootW
StrToIntA

kernel32

lstrlenW
GetSystemWindowsDirectoryW

Exports

Exports

?OpenClipIn@111KPAUHINSTANCE__@@U_SYSTEM_INFO@@/N
?OpenClipOut@111KPAUHINSTANCE__@@U_SYSTEM_INFO@@/N
?UndoAction@111KPAUHINSTANCE__@@U_SYSTEM_INFO@@/N

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DSS
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ