9a129391b954892006a6bb0ec0cc1ef2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a129391b954892006a6bb0ec0cc1ef2
Size

103KB
MD5

9a129391b954892006a6bb0ec0cc1ef2
SHA1

b7fce1ad495db4d26f373b54853c26f3fcf7d43f
SHA256

2de75f3f634a30f6210c38a6262024360545a6e49d719768f81746fc245c18d9
SHA512

dafb6b2ce47bbdd3920af1a01092439eb6c67556e821df0bf69a2483c1529c949f49f59b91e145e3c2a45eda368c0b866ce20f5a209bfb3d3b8e98098c4a15d7
SSDEEP

3072:ESvHbXY8O3i+ixyy6qTNpRZZGKkT17vokT7+:l08BwqBLGKKekTK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a129391b954892006a6bb0ec0cc1ef2

Files

9a129391b954892006a6bb0ec0cc1ef2
.exe windows:4 windows x86 arch:x86

49aa91ebc309ed449efb1a61b9804a94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError

ntdll

RtlSetSecurityObject

user32

PaintDesktop

advapi32

AccessCheckByTypeAndAuditAlarmW

gdi32

GetPolyFillMode
GetDeviceCaps
SaveDC
GetDCBrushColor
GetTextColor
ModifyWorldTransform
RealizePalette
UnrealizeObject
SetLayout
GetDCPenColor
GetCurrentObject
AddFontResourceA
Arc
CreateBitmap
CreateCompatibleBitmap
CreateDIBPatternBrush
CreateRoundRectRgn
GdiSetBatchLimit
ScaleWindowExtEx

msimg32

TransparentBlt

rasapi32

RasInvokeEapUI
RasGetSubEntryHandleA

esent

JetOpenTempTable3

ntdsapi

DsBindWithSpnA

odbc32

SQLSpecialColumnsA

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ