9726a73e004a59d7c13d444a9b9bedac | Triage

Sharing

General

Target

9726a73e004a59d7c13d444a9b9bedac
Size

17KB
MD5

9726a73e004a59d7c13d444a9b9bedac
SHA1

0ca68961f8ec56785ba6a1ca485005d34a49cf0f
SHA256

0ab90b7006fa91a234c2100db68d732f10614f27a77c315b08af178ec0abafda
SHA512

da5e13768eae3e4296e79c4d4e0b411d5b27fbba18864388a1e3b0175a0365b3df329c5e595182bda1ca3c4c13306a750e262b1df3692933d1f66d539940f8e2
SSDEEP

384:bFBHrabFJcmZO2Zp+Nye8pqrmub8TyztsDN:bf2xJoKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9726a73e004a59d7c13d444a9b9bedac

Files

9726a73e004a59d7c13d444a9b9bedac
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE