09c47e7afc1f5a13c66b9f215aec203f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09c47e7afc1f5a13c66b9f215aec203f
Size

228KB
MD5

09c47e7afc1f5a13c66b9f215aec203f
SHA1

6cd5b4f38ebcd721739274f485a3c52a2c99fce8
SHA256

a7b15b574440d7d47e28c1ec695731f6505be6ac81fa321488ed28c5b2d50569
SHA512

806939212b2460992bff533613c0f1e6fb40a6c9cf08f7f419da6b62b266de7c94c3e3beb4dacf1e25afc2b4371491aa90d2ffb37e5e258c6fa3c2fd659d1d0f
SSDEEP

6144:XacUWIX5it5DLUr7gKlt9t7OY1591Sm68Y73e:qcUWS+D8lxt7OY1X0sY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09c47e7afc1f5a13c66b9f215aec203f

Files

09c47e7afc1f5a13c66b9f215aec203f
.exe windows:4 windows x86 arch:x86

ef4729a66c398f2cc1415670d297ce64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
DeleteFileA
GetWindowsDirectoryA
GetCurrentProcess
SetFileTime
GetFileTime
ExitProcess
LoadLibraryA
GetModuleFileNameA
Sleep
LockResource
LoadResource
SizeofResource
WriteFile
WaitForSingleObject
SetThreadPriority
CreateThread
GetCurrentThreadId
TerminateProcess
OpenProcess
CreateEventA
OpenEventA
Process32Next
Process32First
CreateToolhelp32Snapshot
Thread32Next
Thread32First
CloseHandle
GetModuleHandleA
FindResourceA

user32

GetWindow
FindWindowA
SendMessageA
GetWindowTextA
GetClassNameA
PostMessageA
MapVirtualKeyA
GetThreadDesktop
wsprintfA
EnumThreadWindows

advapi32

RegSetValueExA
RegCreateKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ