9b4d200b23d49b152a3b411d9656a5be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b4d200b23d49b152a3b411d9656a5be
Size

636KB
MD5

9b4d200b23d49b152a3b411d9656a5be
SHA1

a2fc8be39577a1f60e9274072b9a5c782f7e62b6
SHA256

9b85e7e011b9e121dfac9e471bf67676403bafed0d42825a2ed8437ef07293bf
SHA512

7ccb6f251507df3b74d44659201b6df014e149e13ff7fc993fa1e55c5415f78079bac0d76374b704fdf01f0bde89afeded047b6d3bcc11f3952e064e14bec0c4
SSDEEP

12288:1HU40jDUtgGk6JAgA6X4zCTiuaSFFFFUr52s0dso/rCdVFqD2wcWilR9GyvI+xe:OhUtgRuJRTPFFFFU4dprCdKaJNGyzxe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b4d200b23d49b152a3b411d9656a5be

Files

9b4d200b23d49b152a3b411d9656a5be
.exe windows:4 windows x86 arch:x86

4d2b1a769ac314ff629427c1df03d403

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
FindClose
FindFirstFileW
GetLocaleInfoW
GetVolumeInformationW
GetFullPathNameW
CreateFileW
SetErrorMode
GetVersionExW
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate

msvcrt

_initterm
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_stricmp
acos
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
_makepath
_wmakepath
wcscmp
wcscpy

msimg32

TransparentBlt

Sections

.text
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ