9a9526a4a830c19a84f23f71e8fec222 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a9526a4a830c19a84f23f71e8fec222
Size

24KB
MD5

9a9526a4a830c19a84f23f71e8fec222
SHA1

5afe5d9d440a39ebecc45b0d076aedeff4bc9eb9
SHA256

17fb29e53f848f8eb6e25e80250aa141913144a91f951cb22da0407f7bbfb5c8
SHA512

c90dda8e78e9d9b0fd3a8f32b44a6499480fe6c1cab7e09c2be2685d75254e506b66cc6770cb1e432eef3c9e5a52a104185b69c746e06313bfce93735a690662
SSDEEP

768:ET6JEDPUTYz5/oaV9idy9tLLA3atEmtEbyxe:LuDPgY9/3VQc6yPtEbme

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a9526a4a830c19a84f23f71e8fec222

Files

9a9526a4a830c19a84f23f71e8fec222
.exe windows:1 windows x86 arch:x86

69ee175c1a987a18653544c9c3682f7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FlashWindow
ChangeMenuW
CallMsgFilterW
CreateMenu

gdi32

FloodFill
PathToRegion
GdiStartDocEMF
RectInRegion
GetDeviceCaps
PtInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

shell32

SHGetMalloc
StrRChrIW
SHEmptyRecycleBinA
Control_RunDLLW
SHGetDesktopFolder
RealShellExecuteExW
SHFileOperation

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE