b9d0a2d7169e484df993d3d8ba946f4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9d0a2d7169e484df993d3d8ba946f4f
Size

636KB
MD5

b9d0a2d7169e484df993d3d8ba946f4f
SHA1

12fda9c0eb525d2fed15977f78430cba458dc722
SHA256

e7417addfe9c8e0e805f23f8c48a9bdf79a10b03cb113b9d97e0662b25f8e8e3
SHA512

d71ef74a17ae0dd9ef0cf132885d13e6de0268b561fa280f4f13c55a0162b34678062d1a7a5a7ead4de8a1ded72d00089cb300ad7b8496cc3fbe6feaa630d4e1
SSDEEP

12288:+HjmgMMItSLWS1XcsY/MGbHACklKVeidOtssRvbY82N05tdHjLxghhH:amgMMItSZ1XVY/9SEyRzYeTdHZgHH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9d0a2d7169e484df993d3d8ba946f4f

Files

b9d0a2d7169e484df993d3d8ba946f4f
.exe windows:4 windows x86 arch:x86

d5f2d8849813a4009dd8b330de1b3bde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DefWindowProcA

oleaut32

VariantChangeTypeEx

Sections

Size: 605KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE