9b14dd9c3ded47fb236f15350ff5cf23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b14dd9c3ded47fb236f15350ff5cf23
Size

243KB
MD5

9b14dd9c3ded47fb236f15350ff5cf23
SHA1

59366d53b651a438b6078081389f45f6643771b9
SHA256

1b565dd821c10cff66f9b8682df2a08d581820bb243bd94d14077c0a02051488
SHA512

92fc90b608b5f8b60680f5dcb47e3bb5b574e254169488d0165f6a3c3d22ba2c85c04cc491a980f2604a94261c0d441d3cc0eb8d7ee0cd074e707114a5efad2c
SSDEEP

6144:Tq5f49cC9LMMlhIk7IsrVSlxwzq55WkH5nqbX7Xd7mD55/KsmRdut6:Tq5QtlnlhIk7IsrVSlxw+5tH5nq/Xd7T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b14dd9c3ded47fb236f15350ff5cf23

Files

9b14dd9c3ded47fb236f15350ff5cf23
.exe windows:4 windows x86 arch:x86

3a9edf19f54869215d29d35846603b2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

shlwapi

StrStrA

kernel32

lstrcpyA
lstrcatA
CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetProcAddress
LoadLibraryA
LoadResource
LockResource
SizeofResource
Sleep
WriteFile

comctl32

GetMUILanguage

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 230KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE