09555b5d7493d291630e979dcbbd9f4c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09555b5d7493d291630e979dcbbd9f4c
Size

375KB
MD5

09555b5d7493d291630e979dcbbd9f4c
SHA1

571602f13ffafc5bcf091b2911c37ffa2b55ddf4
SHA256

51bb4b734b4f784452d9992cdf4b1447822ea3b68832295033fe359b8c23d969
SHA512

dbc42cb02600b8e194baa2767d1638feca8a02042a776d39a126af3018ce54bdc934a0751e0e7450aeaf9babd4daf74237de66e60f5fa8edf8571fd03166efea
SSDEEP

6144:UTYCrsZNUsNM/jjBFTufl5V/plnajd07/g7qvGyE8svfZXBUx6A1YjOl7XKpQ4:U/snlM/jzTAV/3alqvU84xRXmY4G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09555b5d7493d291630e979dcbbd9f4c

Files

09555b5d7493d291630e979dcbbd9f4c
.exe windows:4 windows x86 arch:x86

e4d9c894503f3c989f6c207b40b99442

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
UnmapViewOfFile
LocalFree
GlobalUnlock
Sleep
PulseEvent
GetComputerNameA
ResetEvent
GetCurrentDirectoryA
CreateFileW
CloseHandle
CreateThread
GetTickCount
GetModuleHandleA
GetCommandLineW
lstrcatA
HeapCreate
LoadLibraryW
GetSystemTime
lstrlenA

user32

FillRect
SetFocus
DrawEdge
DrawMenuBar
CreateWindowExA
GetKeyState
CallWindowProcA
IsWindow
GetDC
DispatchMessageA
GetScrollBarInfo
GetDlgItem
CheckRadioButton

clbcatq

SetupOpen
UpdateFromAppChange
SetSetupOpen
CheckMemoryGates
DowngradeAPL

timedate.cpl

CPlApplet

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ