b9ab01dab0c8312dfd5c99ff6255ce107d40e09432504c6aada249961a3f6614N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9ab01dab0c8312dfd5c99ff6255ce107d40e09432504c6aada249961a3f6614N
Size

45KB
MD5

40cce50d53d556e8b6567e33d473f4e0
SHA1

42f0696cd8d53c92de415f69bfcc115fbb05168d
SHA256

b9ab01dab0c8312dfd5c99ff6255ce107d40e09432504c6aada249961a3f6614
SHA512

0d328ad7f1ff88732ac49836dd3a095ab44b0405bda8867bf90dcb8874fd2698a83a067f4f9b34c3d99595fec05a655f9e3063b4b3fba0a9d7f9b25cea1b1c5e
SSDEEP

768:8m01D3vp1qUjP/H2RFLPxU+btcqcdEtm5qHpWP9oD1072:8mgvqr9PxDtcqiEAYHpW8a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ab01dab0c8312dfd5c99ff6255ce107d40e09432504c6aada249961a3f6614N

Files

b9ab01dab0c8312dfd5c99ff6255ce107d40e09432504c6aada249961a3f6614N
.exe windows:5 windows x86 arch:x86

5d260a2f142b175a2c50b5d2b1b7df4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
RegSetValueExW

kernel32

ExitProcess
GetLastError
FreeLibrary
GetCommandLineW
GetProcAddress
LoadLibraryW
WritePrivateProfileStringW
ExpandEnvironmentStringsW

user32

wsprintfW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE