a9d3744b045d9f2839274d3e03f0be5c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9d3744b045d9f2839274d3e03f0be5c
Size

171KB
MD5

a9d3744b045d9f2839274d3e03f0be5c
SHA1

9eda30a1241a99a58f40f466fc021bd2ba9d0c1f
SHA256

25b18991d4afbf3c7cea42bdd57454245398c6af6fa9aa830d146fd00df6dedd
SHA512

cca65ebedbd897f533e8d2a989561de652cee31b0fafa7337b8bf76ea97dba5586df9aaa54b83a2c5a5843fdee976942a32b8af78cea7b1399f2c0a1b431c7bf
SSDEEP

3072:rW5dokhxd+MKNWtWzB9y2asTPtPuMAsQCK0Ky9hOobGElEx+THq:rWsknd0QWzHy502wQhy9BvHq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9d3744b045d9f2839274d3e03f0be5c

Files

a9d3744b045d9f2839274d3e03f0be5c
.exe windows:4 windows x86 arch:x86

7879fc98b9b3e34dfa0e6b122040dd79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
GetExitCodeProcess
GetCommandLineA
CloseHandle
GetTickCount
SearchPathA
SetLastError
FindClose
CreateMutexA
GetLastError
Sleep
GetModuleHandleA
VirtualProtect
GetComputerNameA
GetDriveTypeA
GetVolumeInformationA
ReleaseMutex
FreeConsole
TlsGetValue
EnumResourceTypesA

shell32

DragAcceptFiles
ShellMessageBoxA
SheChangeDirA
ShellAboutA
DragQueryPoint
SHGetNewLinkInfo
DragFinish
DragQueryFileA
SHGetDiskFreeSpaceA
SHFree
SHGetSettings
SHAlloc
SHGetMalloc
StrChrA

dmutil

DisplayError
ShowMessage
TranslateError
SzwFromSza
SzwDupSzw

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ