9a54548e06db31332b814d6c26e3f26f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a54548e06db31332b814d6c26e3f26f
Size

15KB
MD5

9a54548e06db31332b814d6c26e3f26f
SHA1

b5f54e9ac180fb22fed7d2caa188c94547525136
SHA256

40fb72b6ab4791ab050cfeba23adb45ef54f4bd3bd0224aa2e97bf03222bdd4b
SHA512

626179b02c4e21b58cf52cb8f0c92d30074c645843acb404256359e3c14446d1a5e81d50a18dfbb05b916eba86aacca64f0b8e772bed207b684e47b6a7aeb62b
SSDEEP

384:1yTDayr4EAhjg4Tg90ylJPTALiG5B9sGrw1C:1JyGPTgr3LAmq/r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a54548e06db31332b814d6c26e3f26f

Files

9a54548e06db31332b814d6c26e3f26f
.exe windows:4 windows x86 arch:x86

9fd546f7910260c1c5a19b67d983ffd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetEnvironmentVariableA
GetFileTime
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetVersionExA
GetCommandLineA
GlobalFree
LoadLibraryA
LoadResource
MoveFileExA
OpenFile
SetFileTime
SizeofResource
WinExec
WriteFile
FindResourceA
ExitProcess
CreateFileA
GlobalAlloc
CloseHandle

user32

wsprintfA
MessageBoxA

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegCloseKey

msvcrt

_wfopen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE