9a1d118ed1f788e4bdf289a09345b588d5ecb0ad15225b45aaa20888e74f42b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a1d118ed1f788e4bdf289a09345b588d5ecb0ad15225b45aaa20888e74f42b6
Size

63KB
MD5

03c73b7ec8769899b59e46c332e5016a
SHA1

3160929ebda69fe3e4a2deafc6c1f36d94119ac9
SHA256

9a1d118ed1f788e4bdf289a09345b588d5ecb0ad15225b45aaa20888e74f42b6
SHA512

c50d6d8ecfe9e18a2419592fbf50453b0c7b84b407b00904816417ee3925d22d9693989fe342b9cdf93d877156395e45744b94118e4ff73815b1457ef78deb03
SSDEEP

1536:NPU6Af/gQOlSQoWctgUvnrOXXUiFAQzcmcEmSTsixrg8T:4/3OEQ4/KXrFFcmcEmSTsiO6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a1d118ed1f788e4bdf289a09345b588d5ecb0ad15225b45aaa20888e74f42b6

Files

9a1d118ed1f788e4bdf289a09345b588d5ecb0ad15225b45aaa20888e74f42b6
.exe windows:4 windows x86 arch:x86

e0fba4cfd6968c76f052e8108ee048f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomA
LZOpenFileW
QuirkIsEnabledWorker
GlobalAddAtomW
BaseCheckAppcompatCacheExWorker
DuplicateEncryptionInfoFileExt
GetMailslotInfo
CancelThreadpoolIo
GetConsoleAliasesA
SetInformationJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE