9d9114cebc924bc995e2471abb07a18d47337b30ceeea03e09a657445a241e80N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d9114cebc924bc995e2471abb07a18d47337b30ceeea03e09a657445a241e80N
Size

163KB
MD5

f5874bfbd437f6b19a41fdecccc3dd40
SHA1

c60e35ad159f9dd962fdf5a523162ef7185e8f68
SHA256

9d9114cebc924bc995e2471abb07a18d47337b30ceeea03e09a657445a241e80
SHA512

af0c1861e95e4dff514f22b6fdfe5caa640b9ed129d9de8000c56f8af2214cdab346807ceb1c0d8443e94add9c0482ffdb1a7b073c3dcdac4e951516fd40924e
SSDEEP

3072:z1N1vRulgT1VR1gVCJnwaG+7fuwVDJ7FUm24BkKEAKen83p3HmtZUmN/D2uV:pRumT1VR1gVCpwaG+7bDfxCK585HSUm1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d9114cebc924bc995e2471abb07a18d47337b30ceeea03e09a657445a241e80N

Files

9d9114cebc924bc995e2471abb07a18d47337b30ceeea03e09a657445a241e80N
.exe windows:5 windows x86 arch:x86

ca4a9c4d91429eee005cc1d0035a7e3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

K:\mgresmecz\yStnQAeNKzSwE\iuQkzrgmj\ItbihvWjlEjf.pdb

Imports

kernel32

GetHandleInformation
GetFullPathNameW
GetModuleFileNameW
CreateWaitableTimerA
HeapWalk
HeapUnlock
SetThreadAffinityMask
GetACP
GetProfileIntW

shlwapi

PathUnquoteSpacesA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

MessageBoxA

gdi32

FillRgn
DeleteObject
AddFontResourceW
CreateRectRgn

Exports

Exports

?MyDataFunc@@YGKXZ

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug01
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ