9090630848c5b0edcc338093df84062f5777cd5cb85cf20bb1554a3b8da7962fN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9090630848c5b0edcc338093df84062f5777cd5cb85cf20bb1554a3b8da7962fN
Size

240KB
MD5

f2a3ca842e4838c0b2d7e5109b289ed0
SHA1

74b7062320bf1763f003b9540af4affcb8122e95
SHA256

9090630848c5b0edcc338093df84062f5777cd5cb85cf20bb1554a3b8da7962f
SHA512

b0440a5c60ab41984bbac2d91173e80722a17d864e3f1b39fa8c973f114800b2e0fa70e4ec6ab543ef28392306a01f237ac2fa1034ed426a9ffd726e391254c2
SSDEEP

6144:IzENQFW92cENGgRUWiFG2TQAWfiKac/u/o0XpJNihs6a1:qEuF1cfgRwFG2UAWfhG/oKI+1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9090630848c5b0edcc338093df84062f5777cd5cb85cf20bb1554a3b8da7962fN

Files

9090630848c5b0edcc338093df84062f5777cd5cb85cf20bb1554a3b8da7962fN
.exe windows:6 windows x64 arch:x64

b2d536cbf266429284f460a03c8dea58

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegQueryValueA

kernel32

GetModuleHandleA

user32

ValidateRect

shell32

ShellAboutA

Sections

.reloc
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 237KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE