09f49bf74388287197b242ce7177a617 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09f49bf74388287197b242ce7177a617
Size

774KB
MD5

09f49bf74388287197b242ce7177a617
SHA1

644b9cd2aa5eca32359c7025ab471661d1b7479b
SHA256

14c7bb71ae7ea682fc4db8a0dfd53d4e87b3d8394074b0397c95d05e0d5958f1
SHA512

c2f39f6de04b432b9e35371a0c0c39114d3801c2c7a8a257e6bfa6313c966debcf8fdfb58435e7b85e15314136d47370d00a6f70c71523157058925e71fa53b5
SSDEEP

12288:8ccg3KwL7OhECi0WMUTDFGVBIej5riRzTgYSDjM4IlPlLE6Av3G09rgO27eD31s:8lg3KkOhEpMiDOIKQ5TgYOwDlm9rgn7V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09f49bf74388287197b242ce7177a617

Files

09f49bf74388287197b242ce7177a617
.exe windows:4 windows x86 arch:x86

7a0409979c6fbfe3983b32d90b371a9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
ResumeThread
HeapCreate
CloseHandle
lstrlenA
GetFileAttributesA
CreateFileA
LocalFree
GetSystemTime
GetDriveTypeA
LoadLibraryA
GetDiskFreeSpaceA
GetCommandLineW
CreateThread
GetTickCount
GetPrivateProfileStructW
GetModuleHandleA
SetLastError
FindAtomA
GetComputerNameA

advapi32

GetLengthSid
CloseEventLog
IsTokenUntrusted
RegDeleteKeyA
GetFileSecurityW
RegQueryValueA
CreateServiceA
RegCloseKey
FreeSid
RegCreateKeyExA
GetUserNameA
RegEnumKeyExA
RegEnumValueA

clbcatq

CheckMemoryGates
SetSetupSave
ComPlusMigrate
SetupOpen
DllGetClassObject

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE