9b2e99e51a44927e8fc10454809bd0bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b2e99e51a44927e8fc10454809bd0bf
Size

177KB
MD5

9b2e99e51a44927e8fc10454809bd0bf
SHA1

94f22775279efa671229f30d4f69ca3c8e329c72
SHA256

c924e4c33314305a8e511ec7bef41840c9bf19965f905c1595435a8d53317a39
SHA512

a1620d13cc78271b1d76b473a54eb9a0bacc2a832f84c21e4d0faf7578334b6b4557ab83c61cf06524f0a8e0aa487523cc16b4e907a04b9a02020d07b8689a47
SSDEEP

3072:yJoFqmQiW31gWyOhlpG4IdGX6kJFDfTEYR94R5FV:LF9EgWyObpG4CXkJFDfTEY/G5F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b2e99e51a44927e8fc10454809bd0bf

Files

9b2e99e51a44927e8fc10454809bd0bf
.exe windows:4 windows x86 arch:x86

b115860c515c97d3d478d8e74defb7c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegSetValueExA

rpcrt4

NdrFixedArrayFree
UuidCreate

shell32

Shell_NotifyIconA

winmm

timeEndPeriod

kernel32

FlushInstructionCache
DuplicateHandle
GetModuleFileNameW
UnmapViewOfFile
EnumResourceNamesW
SetEnvironmentVariableW
MapViewOfFile
FindFirstFileA
FindResourceExA
FindClose

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ