9f8bd9155e26a8b8060f88716c827a0d9c8250c66e3d4c5423b17408fcc252c2 | Triage

Sharing

General

Target

9f8bd9155e26a8b8060f88716c827a0d9c8250c66e3d4c5423b17408fcc252c2
Size

184KB
MD5

dc33e82f739cf669157e9ca01892156e
SHA1

0d7cd33fef1c71464d703e4d1ffabf7b2f22a945
SHA256

9f8bd9155e26a8b8060f88716c827a0d9c8250c66e3d4c5423b17408fcc252c2
SHA512

b7ccdf14995c1892fe8be251aa379a744ed89420181c472d92a9b5421bf7f021a827cab957c71ed09a847d166c6cb702b4a98644ceb8a9748e9cb7dcd2bbd3aa
SSDEEP

3072:wgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdg3dA4l:lPFkq6zOe5ilSanO8d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f8bd9155e26a8b8060f88716c827a0d9c8250c66e3d4c5423b17408fcc252c2

Files

9f8bd9155e26a8b8060f88716c827a0d9c8250c66e3d4c5423b17408fcc252c2
.dll windows:5 windows x86 arch:x86

4a4882bc1b5b7458d9aba22e8f9b9b31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOverridePredefKey
RegisterEventSourceW

gdi32

GetFontData

msvcrt

memset

user32

ShowOwnedPopups

oleaut32

VarBstrFromDec

kernel32

GetModuleHandleW
LoadLibraryExA
GetModuleFileNameA

Exports

Exports

FWroeeWqoinnmw

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ