9279ca6fe655ebbacf045101c95a6636fb23e5b1b41d8be702eabc9ac8d6ea0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9279ca6fe655ebbacf045101c95a6636fb23e5b1b41d8be702eabc9ac8d6ea0c
Size

106KB
MD5

f4109a4ff333bb438828ff98e4c261fe
SHA1

4613d1f28ed897536a722d5ae674b7595891d097
SHA256

9279ca6fe655ebbacf045101c95a6636fb23e5b1b41d8be702eabc9ac8d6ea0c
SHA512

5782b6dd3bb12aed9335476a8ceabbb83353ba8f5b7ad57d65f86d2f7ecf9f4d7bb8452056bada22d31377a2170ab3b7fc00ad4673a12c253ab70575a2c2127a
SSDEEP

1536:eT/VMqTzCOAWiiXEKHKgWBc9e4/Ga8diBf5XYJf6v3i6hDFfSl/A4:eT/VjSpfg1NVts6LSl/A4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9279ca6fe655ebbacf045101c95a6636fb23e5b1b41d8be702eabc9ac8d6ea0c

Files

9279ca6fe655ebbacf045101c95a6636fb23e5b1b41d8be702eabc9ac8d6ea0c
.exe windows:4 windows x86 arch:x86

dd4226d1a6a639b6d4762bd12e944e9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetClipBox
LineTo
CreatePalette
GetPixel
DeleteObject
SetMapMode
SelectObject
CreateFontIndirectA
CreateSolidBrush
SelectPalette
RectVisible
DeleteDC
RestoreDC
CreateCompatibleDC
SaveDC
GetTextMetricsA
SetStretchBltMode
GetObjectA
SetTextColor
SetTextAlign
GetDeviceCaps
GetStockObject

kernel32

GlobalFindAtomA
GetCommandLineA
lstrcmpiW
GetWindowsDirectoryA
lstrlenW
GetSystemTime
DeleteFileA
CopyFileA
lstrcmpiA
lstrlenA
RemoveDirectoryW
FindClose
lstrcmpA
GetModuleHandleA
RemoveDirectoryA
QueryPerformanceCounter
VirtualAlloc
VirtualFree

user32

GetDC
GetSystemMetrics
GetDesktopWindow
GetParent
TranslateMessage
CharNextA

glu32

gluNurbsCallback

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ