09ad7dfb2e8c8cba090a3250ad9dbbab | Triage

Sharing

General

Target

09ad7dfb2e8c8cba090a3250ad9dbbab
Size

77KB
MD5

09ad7dfb2e8c8cba090a3250ad9dbbab
SHA1

1ee8675d723553a03a368194bde83f3dd3ae48cb
SHA256

ca28fdc58d00646aea2c07f3065c55f5d79ee11e2365f3a74b93ebbc33d847d6
SHA512

c8f773dfc8a0236a2d5f86af2364ab79c6d2b8b8633620b34cd6d927739bd6453e8794aa1b2039784e5efa8a6aac71af22abfbedcf81c3b723b403d8b4c401b3
SSDEEP

1536:q1KkulMzg5oeRe8dzxcuq6PA6iRQQcc1dnkZaD6/eBTkk:qclSSe8dJAfRPzILey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09ad7dfb2e8c8cba090a3250ad9dbbab

Files

09ad7dfb2e8c8cba090a3250ad9dbbab
.exe windows:4 windows x86 arch:x86

29b6b79d4b955baf0c1b8c9f1156680f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

gdi32

SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable

wsock32

bind
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

shell32

SHAppBarMessage
StrRChrIA
StrStrIA

Sections

.text
Size: 39KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ