9aab342b45d3797e4ec60638b7d0dda0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9aab342b45d3797e4ec60638b7d0dda0
Size

342KB
MD5

9aab342b45d3797e4ec60638b7d0dda0
SHA1

c50e5a47a7e99d6adfae8eec7f5931748fc7baa0
SHA256

92e3c0fa6bc94706be226af19b1f9184aa42301f3ff3e043d2892290eec8c708
SHA512

4e44ef6fc48d08699968198a94b4a6ee1b3a0248a20e791df3182e3d2b3b7ba1ec3fde76083783b5ffb64ebd25422698bbe247aa694153008b709fa893448f0f
SSDEEP

6144:hH/XsmPEWtY99ruIy+im0KVXSOszNJz8OzAQ/wX5pMWRhnrRM4q4se:5/j3t+y+iIS3NJz8O0yop9RhrRM8s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9aab342b45d3797e4ec60638b7d0dda0

Files

9aab342b45d3797e4ec60638b7d0dda0
.exe windows:4 windows x86 arch:x86

25028ac3128fe6f0c24a6f63b2b0a46d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
FreeLibrary
GetProcAddress
EnumDateFormatsExA
LoadLibraryW
WideCharToMultiByte
DeleteFileW
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree

oleaut32

VARIANT_UserFree
GetErrorInfo
VarUI1FromUI2
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 221KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE