9b11c6da1824718ab604cb461bd011cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b11c6da1824718ab604cb461bd011cc
Size

2.0MB
MD5

9b11c6da1824718ab604cb461bd011cc
SHA1

faa5ae2e3b4bc2e6728f095cc4b5f3b51c1d262b
SHA256

cb6c0cf60fd11467e7bfd86b2c5e2d1d7fd357392fe08309bac0f41315be1450
SHA512

5ca6b1a1f88111db8329c65b433f3b2fb8ef08f144b2f74aba37c1d5aea186f923fc5197c5d89c1cd3d6ce54e06f55e233b4200dc72ef0aeef065322c56180f4
SSDEEP

49152:sNgwR+1hphZEcSEXYk1bXKhjGzWuxuJoV0f1BJ:AcNhZeCbXKhC4zdBJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b11c6da1824718ab604cb461bd011cc

Files

9b11c6da1824718ab604cb461bd011cc
.exe windows:4 windows x86 arch:x86

6f0e0dd0edb0befdf4db58fcddc524d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetForegroundWindow

gdi32

GetTextMetricsA

winmm

midiOutReset

winspool.drv

ClosePrinter

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

OleUninitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

inet_ntoa

comdlg32

GetFileTitleA

Sections

.text
Size: 1.9MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE