9a7c3d54886d53bc24d6ffbcee4e70d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a7c3d54886d53bc24d6ffbcee4e70d0
Size

46KB
MD5

9a7c3d54886d53bc24d6ffbcee4e70d0
SHA1

48b24a59e678c34632ef7eb9da2e645819be1283
SHA256

1daebcb55eea69376dc28f5a34b3fd59775029fa6fc9c58fd23578d17d20b0d1
SHA512

511c331ab712b4c80414b47eb93d2843876c815878a8c8e420d79b48173d5aed239e02e304554d8127530390438f75e1bfd8d1dfb5b8f3edd908fa4d1087c4fc
SSDEEP

768:kLKPoCdecZGQHWPybuqBSUSew0KcQyQ1yLo/GvP/PrMZaYktyxqV8v2NaIjFpeyZ:kduGQHCcuUxKcnQ1koOvP/MaYktyxqVF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a7c3d54886d53bc24d6ffbcee4e70d0

Files

9a7c3d54886d53bc24d6ffbcee4e70d0
.exe windows:5 windows x86 arch:x86

4b34c143736e6b80f43fe48f3986a21d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCmpNIW
PathCombineW
SHDeleteKeyA
wvnsprintfA
wvnsprintfW
StrCmpNIA
StrStrW
PathMatchSpecW
PathRemoveFileSpecW
PathFindFileNameW
wnsprintfA
wnsprintfW
PathFileExistsW

advapi32

CryptCreateHash
CryptGetHashParam
RegDeleteValueA
RegCloseKey
DuplicateTokenEx
CryptReleaseContext
RegQueryValueExA

Sections

.glwt
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fsxkj
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.psloj
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ