9b9aa2d832c333c94578a39924b38de6d80cdcb6f353bbedeb342e83bf30886aN | Triage

Sharing

General

Target

9b9aa2d832c333c94578a39924b38de6d80cdcb6f353bbedeb342e83bf30886aN
Size

23KB
MD5

b7de1088ef21d5c50abcb12f9c6f5430
SHA1

b8f092571d5949e3cf9d8b98dd9e23157537d006
SHA256

9b9aa2d832c333c94578a39924b38de6d80cdcb6f353bbedeb342e83bf30886a
SHA512

2b454c7cb67b7bc17b49a7b0c2d0d194655bf5beb8d1b85554bd3f94857e9449913592dfb0d8c3e3ca8a13455c9062c5281ef4c3977a93938dfdbead9e183f90
SSDEEP

384:YpIT5mv2W8EfxKOx0hyWQ9Xc0TSj50ZLuKHu52ifn:Y85mv2WHEOx0hyWQIULuKO5zn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b9aa2d832c333c94578a39924b38de6d80cdcb6f353bbedeb342e83bf30886aN

Files

9b9aa2d832c333c94578a39924b38de6d80cdcb6f353bbedeb342e83bf30886aN
.exe windows:5 windows x86 arch:x86

5f15908da5076b9866aa29d4bc303edd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageW
TranslateMessage
GetMessageW
LoadBitmapA
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
PostMessageA
GetKeyboardState
PostQuitMessage
GetClassLongA

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
HeapFree
SetFilePointer
WriteFile
ReadFile
CreateFileA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ