9ab0cac5a04952ec3302913061d608a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ab0cac5a04952ec3302913061d608a9
Size

23KB
MD5

9ab0cac5a04952ec3302913061d608a9
SHA1

343238333ed2c5c5a91d9afdcb373ecfc8b874eb
SHA256

74819ccedc33adfb16a1a47177e1df3df42295ca1fda4c39aac3f1814b46b706
SHA512

8e916ab8591cde8baee4094c3d11529453139d5badbcf9fca424a80ac1c5723fa96b1bf50772c20c2c3c70337ea3e97e17c8a106a0fffb24bfc914365fcad34c
SSDEEP

384:FhiIuCk38TLNxYZf5J2RhCa6rifctEqvbeOngpsLH1jhkNongAVWZQzwhQNEDNUe:FhiIjNxYZf5J2RU9tpzXg4upAV4QshQ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ab0cac5a04952ec3302913061d608a9

Files

9ab0cac5a04952ec3302913061d608a9
.exe windows:4 windows x86 arch:x86

9af215195dd94b12ebb3bc14cd99b21b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

wininet

InternetReadFile

wsock32

WSACleanup

Sections

CODE
Size: 19KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE