9ba0ecc2bcbd55e1cb4c75a795cb2f64c32b1c7fd0edda0b58b1c5bad5e3100e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ba0ecc2bcbd55e1cb4c75a795cb2f64c32b1c7fd0edda0b58b1c5bad5e3100e
Size

607KB
MD5

411249a08f2d072e3af6ab6326ddb768
SHA1

7a73c5065af83a2b490138af12945d5af5ccf14a
SHA256

9ba0ecc2bcbd55e1cb4c75a795cb2f64c32b1c7fd0edda0b58b1c5bad5e3100e
SHA512

c66d9a791a888c58348414bb452a98bb1b874ead30be36818bda759d7eb90029bef5ec4ec1b161645de40850d362d6eb936a956e785ce3a29591d0975f1e1b2e
SSDEEP

12288:hFUUrABwD6u+woCaQfuWkft+mst7LH/Ty33kDpDRpk0D0PS29dJpZEhWOZWriAi9:hP6uHoTaYjst7LH7y332pDRpk0D0Pj9r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ba0ecc2bcbd55e1cb4c75a795cb2f64c32b1c7fd0edda0b58b1c5bad5e3100e

Files

9ba0ecc2bcbd55e1cb4c75a795cb2f64c32b1c7fd0edda0b58b1c5bad5e3100e
.exe windows:4 windows x86 arch:x86

72a246e1e652e388953dcd51085772af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlRemoteCall

user32

GetMenuCheckMarkDimensions
GetMessagePos

Sections

.text
Size: 604KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE