b9afa43402a623da502d2aba8aba3e7b | Triage

Sharing

General

Target

b9afa43402a623da502d2aba8aba3e7b
Size

12KB
MD5

b9afa43402a623da502d2aba8aba3e7b
SHA1

73229d2f3fe22b0daada6343f619f6961bcc3836
SHA256

4959b7e70e36ff797d0406b038ddc28569c3f688c14fd2ac9e8c61b3a16e7305
SHA512

bad710391d8ef3e14e7fcd3e5d78d7deb8b1cd282ebf2a77e5124531dce6a2d8c98d6f39b12f0172fce218e122f1b0a148d158ad16c8feca7536cef335728646
SSDEEP

96:cf0vXtbeN6fQPmastFwNnD4oFj3lT71yQtQKQYQ:cMv0oEqtFOnL97MQjQYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9afa43402a623da502d2aba8aba3e7b

Files

b9afa43402a623da502d2aba8aba3e7b
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ