9904a05f17828575feb13021de8967bc | Triage

Sharing

General

Target

9904a05f17828575feb13021de8967bc
Size

281KB
MD5

9904a05f17828575feb13021de8967bc
SHA1

78848a51ba08a8486986efcfaaf7501a5e9951cc
SHA256

afb6d00c6c5701a3bc596cbfe5daeefe9957832398c3f302d729a0ce5e86404d
SHA512

b9795ddba02d71e710ea31a5a54341b8b8e58cb9ccb93816b24117b825e77e9a12efc30b83e47906afb0f030458206eaa019f89c4f29b72a9327a92956f23add
SSDEEP

6144:NX9yO2M3RQ3K7wXfmbeMvzjlATabgQqSYOOeHLpvXi4av1RYj:NX9ygmXebeMvNUabJKneH1y7E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9904a05f17828575feb13021de8967bc

Files

9904a05f17828575feb13021de8967bc
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 172KB - Virtual size: 981KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE