9acf80b97617d578103c287e3f15c9295056c2c1bbeea7e4e39f116a9865c73a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9acf80b97617d578103c287e3f15c9295056c2c1bbeea7e4e39f116a9865c73a
Size

1.7MB
MD5

a4cc83ab5ed113c5423151fa794fbba9
SHA1

6f6bbbc59d7b73ef9d723c27fdee6a70a6a4d584
SHA256

9acf80b97617d578103c287e3f15c9295056c2c1bbeea7e4e39f116a9865c73a
SHA512

79820a6e6d62fef3cb0ac6aedb81278b0111f9bac39f64665d03361db8f101b6065a45c00c3161eccb596d5a612352df978d326d4d9c58521e04ed1049996a5c
SSDEEP

24576:OxeE8mJ89ZAfrtwY+Qy97fXHLVMvl8LyLaG7qAtEYcSP79NKIIM+ke+tWjug:MeE1J8r+w9nVMHLaIdtFP79NcM+kmjug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9acf80b97617d578103c287e3f15c9295056c2c1bbeea7e4e39f116a9865c73a

Files

9acf80b97617d578103c287e3f15c9295056c2c1bbeea7e4e39f116a9865c73a
.exe windows:4 windows x86 arch:x86

703074f7e4b33aefff112f419dacba1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4218

msvcrt

atoi

kernel32

HeapFree

user32

ValidateRect

gdi32

SelectObject

comctl32

ImageList_AddMasked

msvcp60

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 704KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1004KB - Virtual size: 1004KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ