9a6fd0be5f819e75300a8f160d181ccb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a6fd0be5f819e75300a8f160d181ccb
Size

12KB
MD5

9a6fd0be5f819e75300a8f160d181ccb
SHA1

81b72e1e7ad7ea32fbdaf9be5e1fe475b15c5d81
SHA256

477bfeffdd2ccba6841fb031fe395dfa9fb4382f0a1d95bc2fcad8623f486284
SHA512

26a3170020c74d99ebcec9533f0b7e4c2158edba7daf7b154542026aa93cc6802ba8b84e90d3f244379d7c0d49daf0681a27c85ebc0cc92e430130985db66342
SSDEEP

96:cRf2EHoykrCzOsxf8cgjJAk71yQtQKQYQ:cRuEIykrOwAk7MQjQYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a6fd0be5f819e75300a8f160d181ccb

Files

9a6fd0be5f819e75300a8f160d181ccb
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ