f9ddc6011a0e5457822ff04ded5ad90d63bfef3cecc8d85f7647a6bf19b467bb | Triage

Sharing

General

Target

f9ddc6011a0e5457822ff04ded5ad90d63bfef3cecc8d85f7647a6bf19b467bb
Size

696KB
MD5

d32d08ad1b4f84968737715e70b94023
SHA1

45d575115133680a73ec2361aa44eb6af98abce0
SHA256

f9ddc6011a0e5457822ff04ded5ad90d63bfef3cecc8d85f7647a6bf19b467bb
SHA512

5572083a9b8b847d750929cfaef03ea598115081266d37e23633468999f63f64bf6c88ceda76ae4503ff9ae396f7315bb338d74a1e3907d311d2fb401697f5e7
SSDEEP

6144:s9Y21i/zGmsMm1vSDWNc0Llq/PcUtgrvBpctWQQ:s6cUGvxNo0LkPcUtgrvXctWD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9ddc6011a0e5457822ff04ded5ad90d63bfef3cecc8d85f7647a6bf19b467bb

Files

f9ddc6011a0e5457822ff04ded5ad90d63bfef3cecc8d85f7647a6bf19b467bb
.dll windows:5 windows x86 arch:x86

9a83a05f751d90a83ed0413e0d8eb676

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegLoadAppKeyW

kernel32

GenerateConsoleCtrlEvent
IsBadStringPtrA
GetModuleHandleA
CloseHandle
OutputDebugStringA
LoadLibraryA
LoadLibraryExA

user32

TranslateMessage
RegisterDeviceNotificationW

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 132KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ