09b5f9052d8353965826c81c0f6ee3f4 | Triage

Sharing

General

Target

09b5f9052d8353965826c81c0f6ee3f4
Size

44KB
MD5

09b5f9052d8353965826c81c0f6ee3f4
SHA1

93426e844a4512516a9948d0aafd5d5a090e1f9f
SHA256

fb43f31f887533521da5602b01a662f10a0ee31abf441f6c7cf780916131bcf1
SHA512

7a9853d2674051ad74735193dcc7a161bf42e5f199dbe673f34659708a483e9825ca8449b28e4cdfe2d584a70d05dbe97cac9afd0a06075809484f87e8388cff
SSDEEP

768:5JPVRbuKWj4O5G/aE5tSZciqkpK5FXnq8VOZu9pGjMYLr3VTAQX8:5JtIKI5GiStRiqAK59+Zn3J5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09b5f9052d8353965826c81c0f6ee3f4

Files

09b5f9052d8353965826c81c0f6ee3f4
.exe windows:4 windows x86 arch:x86

57760f08fa8650e8ed4d1132724be893

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFileEx
GlobalFix
GetLastError
GetCommandLineW
Module32Next
CreateProcessA
GetProcessHeap
WaitNamedPipeA
GetCurrentProcess
EnumResourceNamesW
SetConsoleCursorMode
SetMessageWaitingIndicator
LoadLibraryA
SetConsoleMode
CreateFileMappingA
EnumResourceNamesA
IsValidLocale
SetTapeParameters
LoadLibraryA
AddConsoleAliasA
GetCompressedFileSizeA
WriteConsoleOutputCharacterW
LoadLibraryExA
VirtualProtectEx
GetProcAddress
DefineDosDeviceW
FlushConsoleInputBuffer
CreateJobObjectA
_llseek

user32

SetCapture

Sections

.text
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE