b9707a3920173393227c8cf4a4c38e47 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9707a3920173393227c8cf4a4c38e47
Size

63KB
MD5

b9707a3920173393227c8cf4a4c38e47
SHA1

356d1a848f29375e8a5a7c0548b5c2ff281ce805
SHA256

6c868c7d8acfb9f7365f48c3661c681d3391e5a70e278d4802f3bfbb2087e3e1
SHA512

b21973101d2bbe9c110053b695045728662a177ef5514ba2b6d817ec4a20aa7290c95bff5db0c56d101c9e59c260299d4458a841784ca7ac204e7c067935875e
SSDEEP

1536:pCQlC7dnr/LPNZATXd08hnpRgjAGWeRqX40BT:YQlC7dn36XfhnpRgjvWe8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9707a3920173393227c8cf4a4c38e47

Files

b9707a3920173393227c8cf4a4c38e47
.exe windows:4 windows x86 arch:x86

097aed830f2caa489f65f6bce49e11d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteAtom
GlobalFree
ExitThread

user32

GetDC
GetDlgItem
GetFocus

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 241B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ