a9c209d079b108197419065b7c46cc73 | Triage

Sharing

General

Target

a9c209d079b108197419065b7c46cc73
Size

94KB
MD5

a9c209d079b108197419065b7c46cc73
SHA1

2e8716ac70176c51a56a0527d670eddac05189a4
SHA256

1bda43ecc3c951efe5848ee6beb9a999b8771229c62a8fab1ade35069c965809
SHA512

fcc78613e1580829616d2c7917e0cd155c9192f737ef1883e7a95ae5f456afaae6e7c14f19c838c9e33c6522b4b3bfef2ae230433260ee5cfac3246e22df446e
SSDEEP

192:6QbC86d6IxkzACICF3eSNr71oynPdWmcfMNXXYu8ruW6GEjlDltD6VFSPQyx:6Q89CIBSN/1ZdafM1TxjJltD6TSoy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9c209d079b108197419065b7c46cc73

Files

a9c209d079b108197419065b7c46cc73
.exe windows:4 windows x86 arch:x86

4044195db86d2e107dffa5c37dfcc5c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoA
HeapAlloc
TlsAlloc
GetModuleHandleA
GetLastError

user32

ScreenToClient
LoadCursorFromFileA
ShowCursor

gdi32

GetMapMode
CombineTransform
SetPixel

msvcrt

__p__commode
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE