09b9c5d6e1625ba5e56419313fe15541 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09b9c5d6e1625ba5e56419313fe15541
Size

337KB
MD5

09b9c5d6e1625ba5e56419313fe15541
SHA1

29281ccc806b30a18b0e6f998bcecc57dc32e9dc
SHA256

e725c8d4544738f23f00c51eae46ed45f3e006d81f52c792869ff21abdb44002
SHA512

89d5bd9a9e01ddbb23c2fa1762b697d734a345347aa0ead7e538122de9a0239575260d149a5f44fdcfdbfd4df711154090515b4c9fada91d1f6c90523900ba17
SSDEEP

6144:h4wqyNrRGfLXmxdfcjCCFEUC1h6BpHMKblugpBVnCIdZkFyxfCR:5RGfLXmX0jCCFEl6Bp0CBVZYFyx6R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09b9c5d6e1625ba5e56419313fe15541

Files

09b9c5d6e1625ba5e56419313fe15541
.dll windows:4 windows x86 arch:x86

c5390a8a383227d9f1b222ca6dbdbcb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetTickCount
RaiseException
GetOEMCP
ExitProcess
WideCharToMultiByte
lstrcatW
SetStdHandle

advapi32

RegSetValueExW
RegOpenKeyExW

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 151KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ