b0b9c8924063bcfdc2285cd6e47a1dac74b79008f73af32fd7e1daef997045b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0b9c8924063bcfdc2285cd6e47a1dac74b79008f73af32fd7e1daef997045b1
Size

2.2MB
MD5

d3b34763e80b97f04f1923b5c829066e
SHA1

b3d041badcc293f1466e3c6ca6c01b8b82c44c96
SHA256

b0b9c8924063bcfdc2285cd6e47a1dac74b79008f73af32fd7e1daef997045b1
SHA512

e87e3ce065f6df8259c327cb07e8cb725b593900b0646f89aa1a48d0e9b37cb0f6a87f46d8abd92a0ba63ca75a3a5cfd75ce73d084dff9b699b64cc782ac2062
SSDEEP

49152:mZ2bh6qE0RLLu30871Lu2lftSrkR56i75iNV38FYeOVENfLUjxkjf:Y2V6qBLCrA8MrW6iTWfVMfLUMf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0b9c8924063bcfdc2285cd6e47a1dac74b79008f73af32fd7e1daef997045b1

Files

b0b9c8924063bcfdc2285cd6e47a1dac74b79008f73af32fd7e1daef997045b1
.dll windows:5 windows x86 arch:x86

adbe7609850bab6528184bd97bf27ea5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcscoll

kernel32

OutputDebugStringA
GetStringTypeA
GetModuleHandleW
GetModuleHandleA
AreFileApisANSI
SetPriorityClass

oleaut32

GetRecordInfoFromGuids

gdi32

SetDCPenColor

user32

SetForegroundWindow
SystemParametersInfoA

mprapi

MprAdminInterfaceTransportAdd

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 63B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 999B

IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ