9b6061636fedcf56f4481f3ffa87acda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b6061636fedcf56f4481f3ffa87acda
Size

9KB
MD5

9b6061636fedcf56f4481f3ffa87acda
SHA1

0f0d72238f00323da9e3df1a28b8c861e92bdc9f
SHA256

5126c122f52f00e3ffd7ef24204f92fbc43a69df1ff0dcc30c6b9b7211ab06ee
SHA512

8513d79407c6dfe149b6fbac4e626993f5a0aaceb8442ab53ebac25ad11cb9c5e907371dd9b7cff70a3bc68ec3844d95b9f039419c83aa735399f9739f5e23b2
SSDEEP

192:iTTvYwJQoZ78fbCzYJG3A9ouH6cu9c+YXCVC2Jvtu2IjqRWxlkO3PZ+vG7W4:yAwCo8fbCzYJG3AeuHvVhXCQ2Jq+wxSp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b6061636fedcf56f4481f3ffa87acda

Files

9b6061636fedcf56f4481f3ffa87acda
.exe windows:4 windows x86 arch:x86

b68f169a372c17daf46220a075e0889b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelIo
GetACP
GetCurrentThreadId
GetCurrentThread
lstrcpyA
CloseHandle
FindFirstFileA
CreateProcessA
GetThreadPriority
GetCurrentProcess
lstrcatA
GetStartupInfoA
MoveFileExA
WriteFile
CreateFileA
lstrlenA
GetTickCount
FreeLibrary
LoadLibraryA
CreateDirectoryA
GetCurrentProcessId
Sleep
lstrcmpiA
DeleteFileA
ReadFile
SetFilePointer
GetFileSize
GetSystemDirectoryA
GetModuleFileNameA
GetTempPathA
GetShortPathNameA
GetLastError
CreateMutexA
GetProcAddress
lstrcpynA
HeapAlloc
GetProcessHeap
HeapFree
GetTempFileNameA
ExitProcess

user32

GetActiveWindow
GetCapture
GetTopWindow
wsprintfA
SetActiveWindow

gdi32

GetBkColor
CreateCompatibleBitmap
GetBrushOrgEx
GetBkMode
CancelDC
CreateCompatibleDC

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 55B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE