9a5b8230100c2afe520341e474ecbe7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a5b8230100c2afe520341e474ecbe7e
Size

12KB
MD5

9a5b8230100c2afe520341e474ecbe7e
SHA1

9ed002a72bb966d6d89083dcd870f6f52c263d1f
SHA256

412f4977dbb4d0f755b6cace16a3f5e14fc92a3c6ea81ecb15c25fa635939d00
SHA512

8f1c108f26fbbd8e3584ab575ba7999985105ca09fa98ac526c2fb65cd86119caa928cede1821c2d7b31590857ed54cb6d21edd9f387de47f28a6dc452a92945
SSDEEP

96:cF7EIrWqq5sNNxzfsGKoVuU+ETwJlJL+wkNFM71yQtQKQYQ:cSkq5MXKI6ETeJL+wkPM7MQjQYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a5b8230100c2afe520341e474ecbe7e

Files

9a5b8230100c2afe520341e474ecbe7e
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ