9ad5fd56ae0c2f886763c61f44cebb5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ad5fd56ae0c2f886763c61f44cebb5a
Size

113KB
MD5

9ad5fd56ae0c2f886763c61f44cebb5a
SHA1

d15d6256cac0579bd228abf0b9727f1b547506f8
SHA256

8e3966dd89343317361d10635d47f7a37e0dc3a24df0cef7f5bcf66593045600
SHA512

2f9ad8351d7ef282be17f695a646a3afc6e3f5b022adf3f6962ecccf4b31a373eb84109fe7749bef04e676792c26916b1af5dc258b60f8062d7571f12e820f77
SSDEEP

3072:DKFCaQFegLZ/I/03iW0u2U1upYCPOGeOF:D2Cajg1I/0SW6wupY7O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ad5fd56ae0c2f886763c61f44cebb5a

Files

9ad5fd56ae0c2f886763c61f44cebb5a
.exe windows:1 windows x86 arch:x86

091f6c7c6bf5506030cf9d7e9c8d5eee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

TextOutA

winmm

waveOutGetPosition

Sections

CODE
Size: 103KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE