9a6a0f42119778e840a9505fa987143d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a6a0f42119778e840a9505fa987143d
Size

286KB
MD5

9a6a0f42119778e840a9505fa987143d
SHA1

dcfec947f69ec6ba865e24adcd76d6d650d6ca80
SHA256

26bda0087ceb27d589e8a9df7902391a2489ff01750e8be8755092dca94ff3ac
SHA512

d060bb861d42079337d872a3f3063b4d92063499acd3b73ec773aac34991bc1af09d414abe15b19552136e654aef57043339303257fdaa75d9e1332d6bcfc0aa
SSDEEP

6144:r71Lc+fvbXjvMPWy5Y/qWIsbNenSglKDnmmU29+IOB:r7PfrjvYYqWI+enDlKDn3U2o9B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a6a0f42119778e840a9505fa987143d

Files

9a6a0f42119778e840a9505fa987143d
.exe windows:5 windows x86 arch:x86

9cce40eee4d49e8d799bcf12193d8fd2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetInputState
EndDialog
ValidateRect
OemToCharBuffW
GetActiveWindow
VkKeyScanA
SetWindowPos
GetOpenClipboardWindow
SetWindowTextA
DialogBoxParamA

ole32

CreateDataAdviseHolder
WriteClassStg

kernel32

AreFileApisANSI
GetCPInfoExA
GetCurrentActCtx
LocalAlloc
HeapDestroy
HeapCreate
LocalFree
GetModuleHandleW
GetProcAddress
GetNativeSystemInfo
GetProcessWorkingSetSize
HeapFree

Sections

.text
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ