a9b19dcebba5085ca68094e6dfe1c10b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9b19dcebba5085ca68094e6dfe1c10b
Size

97KB
MD5

a9b19dcebba5085ca68094e6dfe1c10b
SHA1

b87dfab56e013a6a22bb324294c17edef70f3a9e
SHA256

0081f5fad38530f694f4d9f2f621c9404549b2f100c805a7768fcefd5a823022
SHA512

d23acb3b3d1ffcb2a114d0d185d10e70478a2c0e2ee446a6215b3a895455b3fb3161ee77511e676d6cb85b79e37950c26376236b41c56b6bd043ca873628bde2
SSDEEP

1536:+xhk8N4iEYFASvW+ZOiHFzMJwZvKKtDqxF+Qcwa/E3GG4c5g7N99y8XK:Wk8N4iX9RFzxv/qKyae4cW39dK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9b19dcebba5085ca68094e6dfe1c10b

Files

a9b19dcebba5085ca68094e6dfe1c10b
.exe windows:4 windows x86 arch:x86

609a76aa99c907c562f18c3f2b10a0f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetCurrentDirectoryA
GetModuleHandleW
GetSystemDirectoryA
lstrcpyA
GetCommandLineA
GetLastError
lstrcpynA
GetTempPathA
lstrlenA
GetModuleHandleA
GetStartupInfoA

user32

DialogBoxParamW

msvcrt

memset
memcpy
strlen
malloc
free
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ