9ab4a81130503a447f052060ca09a51a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ab4a81130503a447f052060ca09a51a
Size

17KB
MD5

9ab4a81130503a447f052060ca09a51a
SHA1

6367deb9079300ede3d8bfbfd19d85d9fb8e5a07
SHA256

372770985e9e0b282a393f55bf7ff67e21ff82b1b74cf02cd042448f7db46355
SHA512

407bb47dfb49fbcbbf8d3c359155d335d36227e3b4a126ba5b893f0dd561c2043639adeea85529735aeea233d645b463ff895f9c5e0c123cd26ac35cb08a5522
SSDEEP

192:3dPHT8y1CxIpVTAv0QsJU8ht8N3yqCPFIQzSaXkjyForu/CDR:3myYIpZ6sJHt8NCqCPKQzp0earuK1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ab4a81130503a447f052060ca09a51a

Files

9ab4a81130503a447f052060ca09a51a
.exe .vbs windows:4 windows x86 arch:x86 polyglot

4ef1a452261d1a0cb3f0e753bbf370b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
printf
signal
strcat
strcmp
strcpy
strlen
system

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE