9bad4d7ecfef3843c81ef7723c13c8fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bad4d7ecfef3843c81ef7723c13c8fc
Size

51KB
MD5

9bad4d7ecfef3843c81ef7723c13c8fc
SHA1

88f2399e38a93021b0b51eb73bf982b6fb2b0190
SHA256

07350e47fddeebb7f91f63b196c56d33178304dd69822fd791bd849f1f40acd1
SHA512

141ca3d92eb2a21460870f458e63d2626cd8a0d8de9a144a289f8547a680739e43f043b239f22ceda8942425ba412dd8607d43a80d7616ebd999a571d86cc4f7
SSDEEP

1536:TJsF5A69jFPSf6PrtXPLCbJjF+xVtlWTmz8JQOn:105h9jFPSf6TUbxsOCz8+O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bad4d7ecfef3843c81ef7723c13c8fc

Files

9bad4d7ecfef3843c81ef7723c13c8fc
.exe windows:4 windows x86 arch:x86

e3a3a7d300759fb7b3bd27da585450c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileExW
CopyFileW
CreateDirectoryW
ExitProcess
GetCurrentProcess
GetExitCodeThread
GetProfileStringA
GlobalCompact
VerLanguageNameW
WriteProfileStringA

advapi32

BuildImpersonateTrusteeW
CryptGetHashParam
CryptSetProviderW
GetAclInformation
GetNamedSecurityInfoA
GetTrusteeNameW
GetUserNameW
RegConnectRegistryA
RegQueryValueW
SetSecurityDescriptorGroup

user32

CallMsgFilterW
CallNextHookEx
DefWindowProcA
DestroyWindow
EditWndProc
EmptyClipboard
EnumWindowStationsW
GetComboBoxInfo
GetGuiResources
PostMessageA
RedrawWindow
SetDlgItemTextA
SetUserObjectSecurity
ToAsciiEx

shell32

CheckEscapesA
DllGetClassObject
FindExecutableA
FindExecutableW
InternalExtractIconListA
InternalExtractIconListW
OpenAs_RunDLLA
SHBrowseForFolder
SHBrowseForFolderW
SHFormatDrive
SHGetDataFromIDListA
SHHelpShortcuts_RunDLL
SheConvertPathW
SheGetDirA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE