9abddbfdb4f39fbf58ac7267edceb9bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9abddbfdb4f39fbf58ac7267edceb9bf
Size

48KB
MD5

9abddbfdb4f39fbf58ac7267edceb9bf
SHA1

7b00fe8fa0be86381344c9b30fbd9cd44c3e3b98
SHA256

a5bb60758bda0c71c17b0883f46c44ad88720ef7476c08d428f362e0a45762f5
SHA512

4e5a2ef01edbf02e532b4a70bad2997b827601dc501262d56d390fffa989b7d43579d8e507976b8b940ab627eafbaf65ec20f99d9213264fadb5ae356bd6fafd
SSDEEP

1536:Iz+9/T4wyJSv105EMHGU8u9aRz/ktEz5cYrJA:IUb4wUV55mU8u9gMtycYa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9abddbfdb4f39fbf58ac7267edceb9bf

Files

9abddbfdb4f39fbf58ac7267edceb9bf
.exe windows:5 windows x86 arch:x86

a787ff3297ab54f55973b7a8132ef46e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW

shlwapi

PathCombineW
PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CloseWindowStation
DrawIcon
GetClassNameA
GetClipboardData
GetDlgItem
GetForegroundWindow
GetKeyState
GetMessageA
GetWindowThreadProcessId
PeekMessageA

Sections

.udqxoj
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gtcrip
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hmtel
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ