9a2fe829f8fb4f6f280791af910aca9c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a2fe829f8fb4f6f280791af910aca9c
Size

17KB
MD5

9a2fe829f8fb4f6f280791af910aca9c
SHA1

1927ae20e89d57da722382ccb5278c1034eccf52
SHA256

62ac821a5d696cdce9bb63844f1f3c726252795793a4c7e773af1a16f541f687
SHA512

c7b3fe59179a5d956cf3c3558af9807a31944767c33d3caf9f0e02d4d5e4118015e9bde759b41d72bb6c98778f7a346b29a5a12b59417cbc75e780366f933890
SSDEEP

192:vxA2FkDeQCYFVVdDheNj1Cdrc3tUNEl0Q8Q//PAO7Vi7VP1cuWuINoN:5AxCY1d+j1V31lt//oSyVWuPFN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a2fe829f8fb4f6f280791af910aca9c

Files

9a2fe829f8fb4f6f280791af910aca9c
.exe windows:4 windows x86 arch:x86

3d2757a91e57568412c41561e850461a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
lstrlenW
GetProcessHeap
FindResourceA
ReleaseMutex
GlobalFree
GetEnvironmentVariableA
GlobalUnlock
CloseHandle
GetExitCodeProcess
DeleteAtom
LoadLibraryExW
SetLastError
HeapCreate
TlsGetValue
TlsAlloc
GetStdHandle
CreateMutexA
CreateFileA
GetModuleHandleA

user32

DrawEdge
IsWindow
FillRect
CreateMenu
GetCaretPos
DispatchMessageA
DrawMenuBar
GetDlgItem
CheckRadioButton
GetDC
CreateWindowExA
SetFocus
CallWindowProcA

ntshrui

GetLocalPathFromNetResourceA
GetNetResourceFromLocalPathA
IsPathSharedA
IsPathSharedW
SetFolderPermissionsForSharing

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gtimuhk
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE