9b7a3bf5fe07e964773fb835f7e6676382a18ac37267a3631d988eb2fcddd5e2N | Triage

Sharing

General

Target

9b7a3bf5fe07e964773fb835f7e6676382a18ac37267a3631d988eb2fcddd5e2N
Size

352KB
MD5

f86a4d45b39256d50518c0d483e21c20
SHA1

540370555146bfd0fbcd695272e008c3e8334479
SHA256

9b7a3bf5fe07e964773fb835f7e6676382a18ac37267a3631d988eb2fcddd5e2
SHA512

b019f23f967c30a76c498b4bb640157d71c8e0d9dc733d62dad2bd6545175b2f214c6a948dad27eb2fa70a0325b58f1349b65a019bdc5bfdc5af0a1175150d00
SSDEEP

6144:jVJtUyhRlMuKz1vqE+ZagncCB3v0kmm+LVr:pUyZ0oagndf0kf+L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b7a3bf5fe07e964773fb835f7e6676382a18ac37267a3631d988eb2fcddd5e2N

Files

9b7a3bf5fe07e964773fb835f7e6676382a18ac37267a3631d988eb2fcddd5e2N
.exe windows:4 windows x86 arch:x86

c66f0821668aebc35f5e6a38718761f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
HeapAlloc
VirtualProtectEx
GetLastError
GetModuleHandleA
GetProcAddress
HeapFree
GetLocalTime

advapi32

CryptGenKey
ConvertStringSidToSidA
ConvertSidToStringSidW
DeleteAce
CreateWellKnownSid
CryptExportKey
CryptDeriveKey
CryptCreateHash

avifil32

CreateEditableStream

winmm

midiInClose

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 681KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ