a9b9f84ae63f47824b6b8a5eea2fc5d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9b9f84ae63f47824b6b8a5eea2fc5d4
Size

144KB
MD5

a9b9f84ae63f47824b6b8a5eea2fc5d4
SHA1

7385611a7a2ce4ecf6c851f85767244796649380
SHA256

2d0ce4a3822df3fa72ca52053534e60d3f0ec4bfbea4a7f61702f000c9052a41
SHA512

7346157f65d551f65943b660e0949cbcf068ae0dbbf82f0f28f03788766555c2eb9f504c1b81322816e5d04e9f42e3ec093bb4011e3ef04647400fd9494c6191
SSDEEP

3072:CNMNa2kydlPo86q0klK5Bufhzlargtw2fgAEAspTyLeR4H:KiaYdo8F7layzaro2Pa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9b9f84ae63f47824b6b8a5eea2fc5d4

Files

a9b9f84ae63f47824b6b8a5eea2fc5d4
.exe windows:4 windows x86 arch:x86

e7e1ae201d7053b96e9388f42860d15b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
GetConsoleCP
GetShortPathNameA
GetCurrentDirectoryW
GetEnvironmentStringsA
IsValidLanguageGroup
UpdateResourceA
EnumResourceTypesA
BeginUpdateResourceA
GetNumberFormatW
LoadModule
CopyFileExA
GetPriorityClass
GlobalUnlock
SetConsoleMenuClose
GetDiskFreeSpaceW
GetFullPathNameW
BeginUpdateResourceW
IsBadWritePtr
GetStdHandle
GetNumberFormatW
EnumUILanguagesW
TransactNamedPipe
VerLanguageNameA
VirtualProtectEx
SearchPathA
EnumSystemCodePagesA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA

Sections

code
Size: 8KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ