09dc1ebbab2789b9f2bf2c0cb57df1ca77abca8f997269e3e2e2d4587cf6b9d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09dc1ebbab2789b9f2bf2c0cb57df1ca77abca8f997269e3e2e2d4587cf6b9d0
Size

21KB
MD5

ccb60559a39d17f897420413bf8d1791
SHA1

3937d9ed26b1de0b5501b7aecef7b7e85781befd
SHA256

09dc1ebbab2789b9f2bf2c0cb57df1ca77abca8f997269e3e2e2d4587cf6b9d0
SHA512

4a6578b532fd2778eae81308da506f38e36d5d44743c05afcf652a3b78bfad1e98ef64c016f5e3e463107ad573ca92bfd26775955cbe38a31d7d1cff7244b0d9
SSDEEP

384:8r4M6Ddys/6iltv/6i2/0ZwcI0gMmks0sEz1n2Ux/itcQQzkQnhWfA5FdR8N7H/p:wjgys/6il1/6iy0ZwcI0gMmks0sEz1no

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09dc1ebbab2789b9f2bf2c0cb57df1ca77abca8f997269e3e2e2d4587cf6b9d0

Files

09dc1ebbab2789b9f2bf2c0cb57df1ca77abca8f997269e3e2e2d4587cf6b9d0
.exe windows:5 windows x86 arch:x86

476a0becca039396e718130f94fed7e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DefWindowProcA
PostQuitMessage
GetDoubleClickTime
GetQueueStatus
LoadIconA
RegisterClassA

gdi32

CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetTextExtentExPointA
GetTextMetricsA
CreateFontA
RealizePalette

msacm32

acmStreamOpen
acmDriverPriority

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
GetUserNameA
GetLengthSid
RegCreateKeyA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA

kernel32

GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
GetACP
ExitProcess
FreeLibrary
GetCPInfo

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ