9b371378f61eaac0f9d01bd8cd2001fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b371378f61eaac0f9d01bd8cd2001fe
Size

416KB
MD5

9b371378f61eaac0f9d01bd8cd2001fe
SHA1

d06e06b2da24f9e85515da380445881256cf3da3
SHA256

e376777bcb2bb8b30ccb4583700b0d2f01b8f362707ceacb678d2c295ecb3778
SHA512

ab9ee600ee691480480f4f34008b07171e1bb8233919bd8933acc57da2d71abb80f9dc1929bcc123030e8ad0adefc691256252e5f45628b970b70955a349e9dd
SSDEEP

6144:n6b2I7dBJY+l8EAnddMJfnDnDYiktjAg2SDj2uqLUITtjtz:n6qIprYLsr0iktjrpDSFJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b371378f61eaac0f9d01bd8cd2001fe

Files

9b371378f61eaac0f9d01bd8cd2001fe
.exe windows:4 windows x86 arch:x86

b760605321a2c4833f44190661b298e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
InterlockedExchange
RaiseException
GlobalFree
HeapCreate
GlobalAddAtomA
GlobalAddAtomA
GetLastError
CloseHandle
GetACP
LoadLibraryExA
VirtualProtect
EnterCriticalSection
GetFileAttributesExA
GetCommandLineA
Sleep
GetStdHandle
GetLocaleInfoA
SetErrorMode
GetSystemDirectoryA
LockResource

user32

BeginPaint
EndPaint
DrawTextA
GetFocus
SetForegroundWindow
GetWindowTextA
IsIconic
FillRect
GetParent
ValidateRect
GetWindow
GetCursorPos
GetActiveWindow
ShowWindow
FlashWindowEx
FrameRect
GetClassNameA
ReleaseDC
wsprintfA

httpapi

HttpCreateHttpHandle
HttpTerminate
HttpInitialize
HttpAddFragmentToCache
HttpAddUrl

winhttp

WinHttpOpen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ