9db990602ddbed76ca6eb418d76e42640f5e59d06ad28c17f02f73471735df3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9db990602ddbed76ca6eb418d76e42640f5e59d06ad28c17f02f73471735df3d
Size

68KB
MD5

2ed47fe87d6125d7fae146d4e79ef4f0
SHA1

329f8d7e09e972ee4920bf8dbd4d1e2e4fa67670
SHA256

9db990602ddbed76ca6eb418d76e42640f5e59d06ad28c17f02f73471735df3d
SHA512

8965508b84e1744c1af74342a248b928c456478c18bac269cab826f9d96eb5a5ecdcec95f8cc4628b7c2d933594c04870a5c4ddb75639a2c823557d6869becaa
SSDEEP

1536:mUL/o7EjR2I0WtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsryrEgxSSO:mq/5jMIPtdgI2MyzNORQtOflIwoHNV2x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9db990602ddbed76ca6eb418d76e42640f5e59d06ad28c17f02f73471735df3d

Files

9db990602ddbed76ca6eb418d76e42640f5e59d06ad28c17f02f73471735df3d
.exe windows:5 windows x86 arch:x86

a3e8b5e80d5f9f266119a4ac18211954

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
SendMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
LoadBitmapA
TranslateMessage
LoadCursorA
DispatchMessageA
EndPaint
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
FillRect
GetWindowRect
KillTimer
SetWindowPos
BeginPaint
SetTimer

kernel32

GetModuleHandleA
GetCommandLineA
GetLastError

gdi32

TextOutA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ