9790c891307c8135299ba9e162fd0aa7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9790c891307c8135299ba9e162fd0aa7
Size

392KB
MD5

9790c891307c8135299ba9e162fd0aa7
SHA1

f4f819c2648059a2e1928fa4181c881fd72cdc94
SHA256

7496faaf9e8577daa4f5dfd422970ca1f266fbf84e8822acb1068743c45cf937
SHA512

6d09c88aae5d4dcc2b738c24843647a97f6e126b89cc3ffd4ee615ac848fdf28b16f60ae08a6900fa32d47aad2f0f3d9bfe4752982aadf0a2476640c7864ee57
SSDEEP

6144:WctjjehO5+VLfPYloa3CO9UB5p6QjwvkVaC5o9xxwCJiIoappvCH8:xXehO5sDPJ6CZvjeAK9xKCJifp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9790c891307c8135299ba9e162fd0aa7

Files

9790c891307c8135299ba9e162fd0aa7
.exe windows:4 windows x86 arch:x86

063db7be3ad4961ab3dbe14019f0af31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
CreateFileA
lstrlenA
GetTickCount
LocalUnlock
LoadLibraryA
GetSystemTime
HeapCreate
Sleep
CreateThread
GetCurrentDirectoryA
CloseHandle
PulseEvent
SetEvent
CreateThread
GetCommandLineW
LocalFree
SetLastError
GetModuleHandleA
GetComputerNameA

user32

GetScrollBarInfo
CreateWindowExA
DrawEdge
CheckRadioButton
GetDlgItem
DrawMenuBar
CallWindowProcA
FillRect
IsWindow
GetDC
SetFocus
GetKeyState
DispatchMessageA

clbcatq

UpdateFromAppChange
DowngradeAPL
SetupOpen
CheckMemoryGates
SetSetupSave

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ