9bdd91a58708af555d1ab09a4c36a8a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bdd91a58708af555d1ab09a4c36a8a0
Size

438KB
MD5

9bdd91a58708af555d1ab09a4c36a8a0
SHA1

d8365e44c15c4bfe0caea5ca22d39c5091778bc7
SHA256

7caf7965d986e5c6eb11e5d21aafcb731d806257fc7c3da307495f6b0830914e
SHA512

f69b59d2a0f25b7a064550a37a50e2fce819d2b63a367e0bc5526ee5d371ef837adc85905ef099eefd2d3863e29f83dc9835f18844298526bf9ea3141175a2c2
SSDEEP

12288:hOanssOPvkwHnsSC4FGMMVCTnr4y7s/rI4m9XRCdtjAYpc:hOanssOPtHnsF6GoLr4y7s/rI4Xt0f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bdd91a58708af555d1ab09a4c36a8a0

Files

9bdd91a58708af555d1ab09a4c36a8a0
.exe windows:4 windows x86 arch:x86

05a6d43d0ab6b5eebabea928308aa821

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

.text
Size: 25KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE