b9425b0b6839a8f855c90de32ce402a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9425b0b6839a8f855c90de32ce402a3
Size

72KB
MD5

b9425b0b6839a8f855c90de32ce402a3
SHA1

b59391ee5cf8845f705860c6827ac6d6b59c13ec
SHA256

dc8954c7d1d2a75f71bea34c542c386048a6c153f1a4e4bd11b611fa5c5d4d72
SHA512

1167d85bb4ba4a003002f0b358702704ebcd560ab8f7895e103a352f05a538f744950ab504bf285b61b3349a6ff7b2c2f43ac36181e951aa003777f5e4681367
SSDEEP

768:l1y2+TNUjuP4xy6OyvmeuseuaHE0v0mTSBVC3fTfWaPS8mJHRUP3iF4feWmkAUAy:lsPgvg33jvQHR6SF/K3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9425b0b6839a8f855c90de32ce402a3

Files

b9425b0b6839a8f855c90de32ce402a3
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ