9af8d5d0eca8e46b3d2c3bac8bfe7e46 | Triage

Sharing

General

Target

9af8d5d0eca8e46b3d2c3bac8bfe7e46
Size

37KB
MD5

9af8d5d0eca8e46b3d2c3bac8bfe7e46
SHA1

7ef811ae3c973f9dd2fd3751e926374cd54bfb56
SHA256

c18ff5f29f3ca46c4aa53d56cddc4bcf2854529c24f06356476379881b3a97e3
SHA512

9012a3d1a9d221fc2adaf6088745e1509d5a78c3b86b8ef93f5415cdd267a3726c1a61d85cfb1182abc8ec593cfd1d0c3e7c9b290782a420bb961cde20ade8b1
SSDEEP

768:C42I2yadMFCI342H0QNzR8AvNL9U8C4jhB1IgyleJ7mSwlNLjvLOwvf/8WKNQdl:YgCIxUQtR8+NL9U8JjpyY1mfjjvLfMWF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9af8d5d0eca8e46b3d2c3bac8bfe7e46

Files

9af8d5d0eca8e46b3d2c3bac8bfe7e46
.exe windows:4 windows x86 arch:x86

09ec0bec5bfa661553a8bae9808a12d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
HeapDestroy
HeapFree
HeapCreate
GetProcessHeap
HeapAlloc

user32

SendMessageA
MoveWindow
LockWindowUpdate

gdi32

TextOutA
SetWindowOrgEx

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ