9a3c7499bae1ae9fde9b281a8ae71302 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a3c7499bae1ae9fde9b281a8ae71302
Size

60KB
MD5

9a3c7499bae1ae9fde9b281a8ae71302
SHA1

afafc6f8d19b23e71453fc6c24102d454f757c4d
SHA256

c53ccbe9ce10716fe5d7ac501efb153bcc7fbc7dd04935fda9f45793bb366f84
SHA512

005d652b45537e1b965c159f1bb5e23f377d81e57b2f6a73518a1e7404f5b197782ee36fb123cfcbea2a99bfd69ce8dc457f28d144c82b2fe8600c0887d9c144
SSDEEP

768:Jsc2W95OGup1lv8SEnZrSEXCKrvjrTCLtvLMZ+mXwQ6gnPVSgGCmprUUfdcF0:JSW2pj8vBnZLytTMbXjPIgPmFf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a3c7499bae1ae9fde9b281a8ae71302

Files

9a3c7499bae1ae9fde9b281a8ae71302
.exe windows:5 windows x86 arch:x86

8a6224e674fd0d8ff2ac43b67e1d55dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Q:\lqBw\kPygDkgz\jfQi\nlro\uifsff.pdb

Imports

gdi32

CreateICW
GetBkMode
SetBitmapBits
OffsetRgn
GetTextExtentPoint32W
SetTextColor
IntersectClipRect
RestoreDC

kernel32

SetEndOfFile
lstrlenA
IsValidLocale
FindResourceExW
SetCommTimeouts
MapViewOfFile
GetStartupInfoA
GetSystemDefaultLCID
lstrcatA
TlsGetValue
GetSystemTimeAdjustment
IsBadWritePtr
DosDateTimeToFileTime
GetOverlappedResult

user32

OpenInputDesktop
wsprintfA
GetNextDlgTabItem
GetClassInfoA
GetActiveWindow
EndPaint
RegisterClassExA
GetDlgItemInt
DeferWindowPos
InvertRect
GetClassLongW
SetScrollRange
GetAsyncKeyState

Exports

Exports

?PrGepQid@@YGNK_N@Z
?BibenZysAmnzjs@@YGPA_N_N@Z
?ItJhexDp@@YGMIPAH@Z
?iUvmXVqrmemvWy@@YGEG@Z
?srfVdihqvhNUJv@@YGPAJK@Z

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ