b9122e944bca6ce2f1fc1f6f95533cae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9122e944bca6ce2f1fc1f6f95533cae
Size

98KB
MD5

b9122e944bca6ce2f1fc1f6f95533cae
SHA1

06bf719df08220dbb52d78fd7bc9cc7c0e3354ab
SHA256

698b572123d708c40aa2ff7f36125a3857333723069722d1781084a4aa3bce28
SHA512

042c4c006a2c3085cc0eb55e95a6fa151bdb615681ced9a07681a107318afde512ef4c8670077f9f0e95075d3708a6f1ce2fbcb0000db3f1d09150ea48b21821
SSDEEP

1536:3V8hZ/lGSA3AsWG6qcTTSBJ8Ud9+zQVrBrpBjNIXbl5eY8bno0QzfbLaN:F8he3gbTiJ8UGQVrBfNaeYECzjLaN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9122e944bca6ce2f1fc1f6f95533cae

Files

b9122e944bca6ce2f1fc1f6f95533cae
.exe windows:4 windows x86 arch:x86

3851c27f551502dd1b585c695777b4b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
CreateFileA
GetOEMCP
GetACP
SetFilePointer
lstrcpyA
GetCurrentProcess
GetStdHandle
MultiByteToWideChar
SetHandleCount
GetModuleFileNameA
GetCommandLineA
lstrcatA
LCMapStringA
LCMapStringW
GetStringTypeA
GetFileType
GetVersion
GetStartupInfoA
lstrcpynA
WriteFile
GetCPInfo

user32

InsertMenuA
LoadCursorA
IsMenu
GetDlgItem
CopyIcon
DrawTextW
CopyImage
GetDC
GetWindowTextLengthA
CloseWindow
GetFocus
GetWindowTextA
DrawIcon
CreateIcon
DrawIconEx
IsWindow
LoadMenuA
GetMenu
DialogBoxParamA
CopyRect
EndDialog
DialogBoxParamW

comctl32

ImageList_LoadImageA
CreateStatusWindow
DllGetVersion
ImageList_Add
MenuHelp
ImageList_Create
ImageList_AddIcon
ImageList_Draw
ImageList_LoadImageW
ImageList_Copy
CreateStatusWindowW
DrawStatusText

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 16.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ