9a4ba2303c4ddaead7aa46bc6a083f8d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a4ba2303c4ddaead7aa46bc6a083f8d
Size

143KB
MD5

9a4ba2303c4ddaead7aa46bc6a083f8d
SHA1

700bb481d26d429334e6dadae2f13df13ce93ef3
SHA256

36f105ea450d339a0be73d818f4b4a0e8aee03abf231efbcfced6d2a4e1dd11b
SHA512

a326e945c43c23cf63531e5a98f3407e2b4201e067df3a9b263574cb2ebcc00cddb4804b21f9ba0fd5ebea2a4ec2b9fb34e7e08b1e9c180ba03e99288248f449
SSDEEP

3072:NbiM05nWrAUL3bI97dplYgOBa/SapBMLfDL7HH92cb:IdocRdHsBa/hpyLf7Hhb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a4ba2303c4ddaead7aa46bc6a083f8d

Files

9a4ba2303c4ddaead7aa46bc6a083f8d
.exe windows:4 windows x86 arch:x86

357d3264a246450a648dba8858d447aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareStringA
ExitProcess
GetCommandLineA
GetModuleHandleA
GetSystemTimeAsFileTime
GetVersionExA
HeapAlloc
HeapCreate
ReadProcessMemory
lstrcpyA

advapi32

ElfReportEventW
ReportEventA
ClearEventLogA

ole32

CoFileTimeNow
IIDFromString
IsEqualGUID
IsValidIid

setupapi

SetupDiGetDeviceInstallParamsA

olepro32

OleCreatePictureIndirect
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleLoadPicture

user32

RegisterHotKey
ValidateRgn
CharNextW

Sections

.text
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE