9b5e2545b7b3bd90f5a286f1699a1c63 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b5e2545b7b3bd90f5a286f1699a1c63
Size

112KB
MD5

9b5e2545b7b3bd90f5a286f1699a1c63
SHA1

b8f5f831e9c45c8cc724af517146f65afb264456
SHA256

59d8cc73da590a25a068e75f54d126816718ba1644c9b750ce09f24743aaf19d
SHA512

c8fd981152c75ca7fb77e66b36686bc510c8de89b1cfb08a25e16cb691bcea2a0a27a06299851f05d6a7940c8c67d7ae67635fc85f5a2bbf242784c32d1175d4
SSDEEP

3072:waO5SQvsgYkDp54Xg0WdhybYAgdAdwPVZR3cW:wfcDZOuYABdwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b5e2545b7b3bd90f5a286f1699a1c63

Files

9b5e2545b7b3bd90f5a286f1699a1c63
.exe windows:4 windows x86 arch:x86

7991269a1483e4e3617c8118fa741eae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
ExitProcess
ExitThread
GetCPInfo
GetCommandLineA
GetConsoleOutputCP
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetFileTime
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalAddAtomA
HeapSize
IsBadStringPtrA
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
TlsFree
VirtualAlloc
VirtualProtect

msvcrt

strncat
strlen
strcpy
atof
fseek
fopen
atol
swprintf

user32

SetCapture
InflateRect
DestroyWindow
CallWindowProcA
DefFrameProcA

comctl32

CreatePropertySheetPageA
CreateStatusWindowA
DrawStatusTextA
InitCommonControls
CreateMappedBitmap

Sections

.text
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ