9709213a15bc6de9108297ad5bb27308 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9709213a15bc6de9108297ad5bb27308
Size

32KB
MD5

9709213a15bc6de9108297ad5bb27308
SHA1

c9a79e1e506a1013684ebfd923276acc4c04a6a0
SHA256

53f66c67dd8012f0a45c24a9d7aab14daa4f7d76b268ecdd4ac66c30e2df2fe3
SHA512

938a724070d02c19c0a9f558144fbdc1237dce1dec9b2cf4209a477a6b65ee6ce91b24c43654706905c076331edef88cbfa785524aba06765afd925eed0c57b8
SSDEEP

384:GUXCWMf9j5f+THgRaIrCswcNTMONL5X7SJiCHb+fztUmTd0OF:3XCWMfh4THgRaIltNtrLSJjCxPRF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9709213a15bc6de9108297ad5bb27308

Files

9709213a15bc6de9108297ad5bb27308
.exe windows:4 windows x86 arch:x86

50a11ff137492a5d96aa34657f84817b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleFileNameA
GetSystemDirectoryA
GetPrivateProfileStringA
DeleteFileA
WriteFile
GetWindowsDirectoryA
CreateProcessA
CreateFileA
SetFilePointer
ReadFile
CloseHandle
GlobalFree
GetModuleHandleA
CreateDirectoryA
GlobalAlloc

user32

ShowWindow
GetDlgItem
EnableWindow
SetWindowTextA
EndDialog
LoadIconA
GetDesktopWindow
SendMessageA
GetDlgItemTextA
SetClassLongA
SendDlgItemMessageA
SetDlgItemTextA
CharPrevA
MessageBoxA
wsprintfA
DialogBoxParamA

gdi32

DeleteObject

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE