9a04457b20af2d7b5d927976d913b7c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a04457b20af2d7b5d927976d913b7c5
Size

393KB
MD5

9a04457b20af2d7b5d927976d913b7c5
SHA1

cea4fc4df88bfd06cb8112397445c5cf660d32b9
SHA256

24b8fb51982ca9c831c48d55375c433811bffe1d062b40c0bb658c150af8324e
SHA512

f1d0d1de26ba519d4f181b992cb309c746bcee928a1530dd884bf808a3b81c1e8a00a4c186eaa6556c755f793ce1747a91f764201938f268d873e115e411d019
SSDEEP

12288:ZE3KpJI6xj1dV9fJcEXW4OYIb5IiENCaSK8Un:ZECb1dV9fJhXWGHNX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a04457b20af2d7b5d927976d913b7c5

Files

9a04457b20af2d7b5d927976d913b7c5
.exe windows:4 windows x86 arch:x86

5f077d5c061020460534a52f028c24c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
LoadLibraryExA
LocalFree
LocalLock
GetConsoleCP
Sleep
HeapCreate
FindClose
GetLastError
GetCalendarInfoA
FreeEnvironmentStringsA
CloseHandle
GetACP
GlobalUnlock
CreateFileA
TlsGetValue
CreateFileMappingA
FindAtomA
GetModuleHandleA
GetConsoleAliasA

user32

DefWindowProcA
CreateDialogParamA
GetDlgItem
DispatchMessageA
DrawEdge
CallWindowProcA
GetDC
GetMessageA
DrawTextA
SetFocus
GetIconInfo
CascadeWindows
IsWindow
MessageBoxA

msasn1

ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecSkip
ASN1BERDecNull
ASN1BERDecCheck

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ