9f44d9acf79ed4450195223a9da185c0b0e8a8ea661d365a3ddea38f2732e2b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f44d9acf79ed4450195223a9da185c0b0e8a8ea661d365a3ddea38f2732e2b8
Size

4.0MB
MD5

da259080f0ce8ba5df1047878b98c34a
SHA1

0ad6ef2b31ee82d457d738c70d50687fee53543a
SHA256

9f44d9acf79ed4450195223a9da185c0b0e8a8ea661d365a3ddea38f2732e2b8
SHA512

44eb95beda06357ef7565d69bbff25044f01b16f7fe9bd5d546661a83e295d8c80c6319b0fbd9e45448042f08d16179d8d0cef4b01cc18b62ab856fbc179016c
SSDEEP

49152:fPd300bEJoKwBYKwnhdR4v6CtD1pkYlr3:1EJ0whE1tIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f44d9acf79ed4450195223a9da185c0b0e8a8ea661d365a3ddea38f2732e2b8

Files

9f44d9acf79ed4450195223a9da185c0b0e8a8ea661d365a3ddea38f2732e2b8
.exe windows:5 windows x64 arch:x64

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lhprlsvs
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xekcdqme
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ