c9fa7f76b1da464a1a65cfb5dd9417cd569cdc3255a9ad7b216ac027925d6376 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9fa7f76b1da464a1a65cfb5dd9417cd569cdc3255a9ad7b216ac027925d6376
Size

2.9MB
MD5

bb29aaf9a1926217aa7920e2b2249384
SHA1

53dd6b90677cda087d19f1aa10e60c0dcc67cfc0
SHA256

c9fa7f76b1da464a1a65cfb5dd9417cd569cdc3255a9ad7b216ac027925d6376
SHA512

ec3e96c0620ee7aaa859caf18da94eab0fe047f5ff19207351b6bfd231fc4ca5a4583f8962e29c977cecc1c36b8da886bdf39325d96cfb1f989d50a710c9b876
SSDEEP

49152:aKiOogXYkSpRBzpHuAmHTGv+twVicZQ/JohdrzV5W0qY0Fc1Fa1el7veeGmQTJPr:/oOKBEAmHTL+ViR2/51r1FKWveeQ2E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9fa7f76b1da464a1a65cfb5dd9417cd569cdc3255a9ad7b216ac027925d6376

Files

c9fa7f76b1da464a1a65cfb5dd9417cd569cdc3255a9ad7b216ac027925d6376
.exe windows x86

ecc3a504d40986550cc0121c757aee13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

socket

rasapi32

RasGetConnectStatusA

user32

KillTimer

gdi32

RectVisible

winspool.drv

DocumentPropertiesA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

StgCreateDocfileOnILockBytes

oleaut32

VariantChangeType

comctl32

ImageList_ReplaceIcon

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

GetFileTitleA

Sections

.text
Size: 1.6MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE