9a6b40e3257b847cdfed07a424b09847 | Triage

Sharing

General

Target

9a6b40e3257b847cdfed07a424b09847
Size

89KB
MD5

9a6b40e3257b847cdfed07a424b09847
SHA1

a5060db95e843fc58bfc4d192705f2538fa3a24f
SHA256

35f27c9e5a6bf11a8454b2eefdcad2b9bd129ffd196446110c67dfad7802a055
SHA512

7e596eabeef470bf7056be98b29bb27fd66293887abe39ff9295aa1e64af69bd18cbe34f8e9926f0618eed536e41e95ad2163e5848eb5cb92964d30960c796b6
SSDEEP

1536:y2AR9Rnlrbru7EumGdkxIiRdvRxuhNMevHiacvelF3FSJJlwh7S:7A/RlXrHuNe9RJruPQaOej3FlG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a6b40e3257b847cdfed07a424b09847

Files

9a6b40e3257b847cdfed07a424b09847
.dll windows:4 windows x86 arch:x86

b843944ace23453d54c976b6bfe95c4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess

user32

MessageBoxIndirectA
BeginPaint
DispatchMessageA
GetDesktopWindow

gdi32

Arc

Sections

.text
Size: 55KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE