9bccff0225957bcd962a305142f8ac11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bccff0225957bcd962a305142f8ac11
Size

178KB
MD5

9bccff0225957bcd962a305142f8ac11
SHA1

079840463ec73dd50b34ea34133e22bea8c6af0e
SHA256

b91e62b3fc9bb605b47e8accf269a7a1421cc8aef7e2fbecba827e92c3a821ec
SHA512

a97012e845c644f3d2d040a45f0c295cf77218642b5250a0db27ee30f60e98838173cb2a76c31e041d2bcb7f4a080cf78d443e833370117d328917efa398aeed
SSDEEP

3072:2SFWzQCY/nIIBClIuqGkJ629YDzEq6UeLkimE5hNKLIkewprqZbE3+bJaBPpRXRf:2SkcXCl/l2+WUeLkimWkIkew8bEKJkh3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bccff0225957bcd962a305142f8ac11

Files

9bccff0225957bcd962a305142f8ac11
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 169KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE