9aa4f2c7b38e3748a4d46a09941b3892 | Triage

Sharing

General

Target

9aa4f2c7b38e3748a4d46a09941b3892
Size

106KB
MD5

9aa4f2c7b38e3748a4d46a09941b3892
SHA1

345e256a3919307be812116bd2919acceb8013da
SHA256

fc2602dd29b791cca669432c233a0cca1db563acec6f9f0565816644522e0095
SHA512

fc4f09036188ecb32d138e8ce75fa3c99570e22bd61b63ae511b2a88390dc7304ed4acf31065dac61b8ac0f2b42b1f9b537414cdf00ae0d6eb0572896cfb5492
SSDEEP

1536:2vz3dpQ9oWM2Fv1HhPoOMKOQL+yvpQTQGSuwkcSu1HFE7tjkkFKCWchjR0GUVWRl:2btpQFMsLPoOMIxEwkcFl+8X8dj3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9aa4f2c7b38e3748a4d46a09941b3892

Files

9aa4f2c7b38e3748a4d46a09941b3892
.exe windows:4 windows x86 arch:x86

37864467a36d50fb91fb94ca0b7c38c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

SHLoadOLE
StrStrIA
DuplicateIcon

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE