1d09dcbd964a7b43e71d8b376f8a29a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d09dcbd964a7b43e71d8b376f8a29a3
Size

72KB
MD5

1d09dcbd964a7b43e71d8b376f8a29a3
SHA1

76116afcb598d463d48b13b49fe2ca21a4fe5fef
SHA256

aa941b305613f74ce1dd7759dd6a837b5151377e98fe1b7a880259194f4a0e1d
SHA512

3fe9b8858bc92926a2e818e61294b15667922617f987d142759788552c73ae6784ba664169d548af90346a84fda8263443d1da1bd83c7f7ba8f63ad8f55e4975
SSDEEP

1536:Q7AS425lW4dvnHigU1nXDYpW0kQYrzq6UU5d64lql:Q8Sll7dfHiX1XqIQ2+6UU5Q5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d09dcbd964a7b43e71d8b376f8a29a3

Files

1d09dcbd964a7b43e71d8b376f8a29a3
.exe windows:4 windows x86 arch:x86

3efb8c77ff9ded95d191ce549805fa98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconW

kernel32

ExitProcess
VirtualAllocEx
GlobalAddAtomA
GetUserDefaultLCID
GetVersionExA
GetCurrentThreadId
GetCommandLineW

user32

EnableWindow
IsChild
IsMenu
MapWindowPoints
MessageBeep
CreateMenu
CharLowerA
GetMenuItemCount
MessageBoxA

gdi32

GetPixel
GetBkMode
RestoreDC

Exports

Exports

_9_mUfWlNCQ

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ