09b9d13cd99d0caf6182b804a85cdd30N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09b9d13cd99d0caf6182b804a85cdd30N.exe
Size

1.5MB
MD5

09b9d13cd99d0caf6182b804a85cdd30
SHA1

3d2e7b3421d9c6ea2687fe199bfde18999674ce7
SHA256

e160ed0e29120d4907f650b8d4f0d4fd4c1af0bc642d4fa203126cc787ed44f5
SHA512

58f6759f08100b307eaf1f887978cae3c68c823c07b0544cf21e2fb0fb876624b0c6d1649c3517ffa676febed12e008801bf24a33939e564a224d4f605a83039
SSDEEP

49152:dpdlghXgOVb8xtjkAz9U0XYRd0zb78N9hQsLX5:BlghHBAZgH0UhP5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09b9d13cd99d0caf6182b804a85cdd30N.exe

Files

09b9d13cd99d0caf6182b804a85cdd30N.exe
.exe windows:6 windows x86 arch:x86

b9180f94db9ea77f1a1c16e704bf8717

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

GetMessageW

shell32

ShellExecuteA

advapi32

RegSetValueExA

Sections

.text
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1Q[
Size: - Virtual size: 578KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.),E
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sc=
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ