9addf785cd2466972695415b8db8d08b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9addf785cd2466972695415b8db8d08b
Size

15KB
MD5

9addf785cd2466972695415b8db8d08b
SHA1

d5772d44faa431eec2b6157e3b89fb5e4843624a
SHA256

41aa38ac909993c07d8828bfdcf964deab4cf622b9a32e7cb47aea6eabd7a0c2
SHA512

2e16ad327f2c8864b9e88906a61d6d9727edd3254884876d841cb79ade1ac723515a7aa2f42e6c9967b9c8db48d7fe40a8d081a392ebff2e05068895f350bf8e
SSDEEP

192:fzTo3bhfeWVDbsr1EGyYsH2LJeGRQ96OeNEM/sIgG7f8VLGOWZfOBf46XpMbPs:Q3bNcUYPLQf96OeCHG7+ChNOG6Xu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9addf785cd2466972695415b8db8d08b

Files

9addf785cd2466972695415b8db8d08b
.exe windows:4 windows x86 arch:x86

220dd34a24dccda46890e8130a432e1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindResourceA
GetCommandLineA
GetProcAddress
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree
lstrcmpiA

user32

GetWindowLongA
GetWindowTextA
GetWindowTextLengthA
EnumWindows

Sections

.text
Size: 1024B - Virtual size: 978B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

spqxnro
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE