9b9fe2612809e3b847e53766595f5249 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b9fe2612809e3b847e53766595f5249
Size

178KB
MD5

9b9fe2612809e3b847e53766595f5249
SHA1

d952d02382c46af5ecc958e131746fb06cc6d350
SHA256

0ebf4525ba84137612c6a06c8824442126c53e53e193529b3811a9e8a230977b
SHA512

e9b992b47a39d2a7a93f4c2532015d37f3ee1a404a3512267fd713fd8365ecd157067bc4f06e150710729f40d4de1e1be6b408f1fb4f59ca4c476539be52a8c8
SSDEEP

3072:DVGb6JICWrozLoj0gV6xcbZZr+Hjvab7vjzW99:D6ozubr+Tab7vOf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b9fe2612809e3b847e53766595f5249

Files

9b9fe2612809e3b847e53766595f5249
.exe windows:4 windows x86 arch:x86

e5247ff1c01502fbaac3988b762c1554

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
UnhandledExceptionFilter
GetLastError
LoadLibraryW
GetHandleInformation
CloseHandle
GetModuleHandleW
EnumResourceTypesW
GetProcAddress
ExitProcess
CreateFileW
GetCurrentThreadId
GlobalFree
GetCurrentProcessId
GetVersionExW

msvfw32

ICOpen
ICSendMessage
ICClose
ICDecompress

user32

TrackPopupMenuEx
RedrawWindow
DestroyMenu
SetWindowPos
LoadCursorW
IsWindow
SetCursor
InvalidateRect
EnableWindow
CreatePopupMenu
GetFocus
GetDesktopWindow
ClipCursor
SetParent
PtInRect

ole32

StgCreateDocfile
StgOpenStorage

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ