9a6f880d4900a87eafc33bc88e134f3a | Triage

Sharing

General

Target

9a6f880d4900a87eafc33bc88e134f3a
Size

77KB
MD5

9a6f880d4900a87eafc33bc88e134f3a
SHA1

dfb278caf2b42cffa113d36085933ca3599c149c
SHA256

78098eb374f53e112dc1937761bb4b9e9d115d00dd81b75d6c7cc7fed7b79774
SHA512

93eb76b75fb5394f4b3c5bdfb95d6aeda2552f81bc0c7bbd141c3be70733c1e3eb9066ef1574f9f7d10b3236e81de8a46fa72c1afbd1c2cc0c90b6ee8b420136
SSDEEP

1536:r3kNmBL8W1bsWhCrudtlbThYNAo/SSz2CdLascuONc:Hh8m4WzTNT5Q2Clg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a6f880d4900a87eafc33bc88e134f3a

Files

9a6f880d4900a87eafc33bc88e134f3a
.exe windows:4 windows x86 arch:x86

1b51904180dbc4099bf824bcb96f9155

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GopherFindFirstFileA
GopherOpenFileW
FtpGetFileW
FreeUrlCacheSpaceA
HttpQueryInfoA

user32

DrawIcon
DestroyCaret
FillRect
GetActiveWindow
GetMonitorInfoW
GetShellWindow

advapi32

ReportEventW
RegFlushKey
DecryptFileW
ReadEventLogW
OpenThreadToken

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE