9743481e10cfcc80e5813b3c23e1a06d | Triage

Sharing

General

Target

9743481e10cfcc80e5813b3c23e1a06d
Size

69KB
MD5

9743481e10cfcc80e5813b3c23e1a06d
SHA1

05f012dcf96d1ac69e9a4186f8de5e79f43cfd57
SHA256

8fa5149f2e19fb1b7f1b4ff65a758d955f41c0aec21883897af0d22b6b75ea06
SHA512

8b49efbc6a7cd5c68b0cd979c3d6d3d3673260dad058856b1d05f294b45eeae917b0d52658fb2f021929b8f5d218a0c57b115e9a26154561570c37eda86960f0
SSDEEP

1536:iOHUdqaQlQRqLZRBm7NZxKQPAVogYRIuJFVa+fbCyPPoK:Iqaglq7X4VoauPNY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9743481e10cfcc80e5813b3c23e1a06d

Files

9743481e10cfcc80e5813b3c23e1a06d
.exe windows:5 windows x86 arch:x86

f15f72e118f4fe641f3fee70c2883579

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

U:\FirmWork\Studio\Common\Bin.exe

Imports

user32

IsCharUpperW
VkKeyScanA

gdi32

GetKerningPairsA

kernel32

GetProcessHeap

Exports

Exports

?FancyBack@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?OptimusIO@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?OptionWindowGear@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?RegardSeven@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?RightApocoloptus@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?SecureCheck@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?SignSetupUp@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?SmeltIron@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?StrongFontW@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
?TaleRevert@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dat2
Size: 1024B - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data3
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dat1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ