090d144658e4fa62eb5b8277a73f1cc4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

090d144658e4fa62eb5b8277a73f1cc4
Size

4.5MB
MD5

090d144658e4fa62eb5b8277a73f1cc4
SHA1

a2de74e09807875a36569b394e03560fbe1aa6f6
SHA256

eec287dc0bbee89b56a8d71066a3feaf4a317d00778687e456da25b5eeba65fe
SHA512

ec0ec2c280002fdf514914c879bdf6759bc94b05edcdee43827beaba9e10f934116f4334dcd87e8541dd284c62a862b7863286c7ba6d23dcf96cf2b2dffe0cf5
SSDEEP

98304:p5DYmm19EJn/35uGFw4XXTrZeZdzmEV/TQZjaKdYRsFKGG/dto:p51m19EB/pRFLXXTrZerzxVuaKdY4G/3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
090d144658e4fa62eb5b8277a73f1cc4

Files

090d144658e4fa62eb5b8277a73f1cc4
.exe windows:6 windows x64 arch:x64

1f7ba736a2891bef51d31bfd603d5c4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ExitThread
ExitProcess
VirtualProtect
GetFileType
CloseHandle
ReadConsoleW
GetProcAddress
GetModuleHandleW

gdi32

GetRgnBox
GetClipBox
GetPixel
GetMapMode
GetMiterLimit
SetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
GetDeviceCaps

comdlg32

GetFileTitleA

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 9.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE