b9e32d2b192c6081bdbba0ece2576d37888c8d3a640f3b8692f1b3d0cfc39446 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9e32d2b192c6081bdbba0ece2576d37888c8d3a640f3b8692f1b3d0cfc39446
Size

2.7MB
MD5

868834f59476d35112b63fd41d06ff9c
SHA1

eb147c3410200b525051040ab3fc31cf7345bfcd
SHA256

b9e32d2b192c6081bdbba0ece2576d37888c8d3a640f3b8692f1b3d0cfc39446
SHA512

a524a20ec87b0b05c9dfeacff013c95d01b96628d2a3a484a0ecc3d4e3aac9a387cbfdc2690ee66f219c0dde9f9e5ee0688dbead5581ebb5f0b9be2616adf2d7
SSDEEP

49152:sGUp0v5RWMni1E/vpsJIbSFq+fUqv1mdsV+izFemDo8ZWvQ4LFSgOC+1qZ:mmv54M1vEIbBiYdYBloE4LF/+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9e32d2b192c6081bdbba0ece2576d37888c8d3a640f3b8692f1b3d0cfc39446

Files

b9e32d2b192c6081bdbba0ece2576d37888c8d3a640f3b8692f1b3d0cfc39446
.dll windows:5 windows x86 arch:x86

cbe0659530cc150cd77e8bfb9f5e211a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

gdi32

SetDCPenColor

oleaut32

VarDateFromCy

user32

SetDlgItemTextA
SetForegroundWindow

mprapi

MprAdminBufferFree

kernel32

AreFileApisANSI
SetPriorityClass
GetModuleHandleA
OutputDebugStringA
GetModuleHandleW
GetStringTypeA

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 86B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ