9bfd14d228294bb84a9a8cc9fc0d1948 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bfd14d228294bb84a9a8cc9fc0d1948
Size

37KB
MD5

9bfd14d228294bb84a9a8cc9fc0d1948
SHA1

330fd2dec947a6b9c25489146267df39b9bf5332
SHA256

bb7af08fbd78017d9dfc686846cf2940e3a24900f8043cce0c13db16967bf063
SHA512

d3d95fe2a202b196479854d8e3b2da9ccc839191566b2bffec8cbc608ffa57561996afaba4e741f374223ba5019b3710b1bddcedfe0de028c536f31d0e0e3b0d
SSDEEP

768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrn:j0Rbb5WRQYt9ir/2wraA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bfd14d228294bb84a9a8cc9fc0d1948

Files

9bfd14d228294bb84a9a8cc9fc0d1948
.exe windows:4 windows x86 arch:x86

879072da78b6146d76f51c669b56a5f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetTickCount
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualProtect

user32

ShowWindowAsync
GetLastActivePopup
RegisterClassA
GetParent

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE