9f50b938783e7b2c66094273e7db3f6e | Triage

Sharing

General

Target

9f50b938783e7b2c66094273e7db3f6e
Size

155KB
MD5

9f50b938783e7b2c66094273e7db3f6e
SHA1

5a5f4883b31f854b2640a04c554398e44ed6ecf8
SHA256

367dbce7bf9513be0cdbde97c5361a5d0abd19b2263d17d49b65e1d110a083a8
SHA512

ef777166fa959e3d40c13cc5201ea563d80fe6e449fe6b636cdb8aab8088a0707e36e0d21e33baacb7c21587f532946ef33031a0ff3d6d2db31ecfa2c07b530e
SSDEEP

768:Se4UnIZ3iQXPww4bzUmleKxWaz/TRP6S0FuyCkLGQXP:R03OHbzJJ9PcfC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f50b938783e7b2c66094273e7db3f6e

Files

9f50b938783e7b2c66094273e7db3f6e
.exe windows:4 windows x86 arch:x86

fcf3ad0e5a5cb909a2bd3e72c2b2fe8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnableWindow
GetDlgItemTextA
GetDlgItem
GetClientRect
EndPaint
SetDlgItemTextA
DialogBoxParamA
DestroyWindow
BeginPaint
SetTimer
SendMessageA
SendDlgItemMessageA
MessageBoxA
LoadIconA
LoadBitmapA
KillTimer
wsprintfA

kernel32

GlobalUnlock
_lcreat
_lclose
GetCommandLineA
FindFirstFileA
GlobalLock
lstrcpyA
lstrcpynA
CopyFileA
CreateDirectoryA
ExitProcess
FindResourceA
GetFileSize
GetModuleHandleA
GetTempPathA
GlobalAlloc
GlobalFree
lstrcmpA
LoadResource
LockResource
SizeofResource
lstrcatA
_lopen
_lread
_lwrite

gdi32

StretchBlt
SelectObject
CreateCompatibleDC
BitBlt

comctl32

CreateToolbarEx
ord6

msvfw32

GetOpenFileNamePreviewA

shell32

ShellExecuteA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ