b9d7e8d9af08ffexeexeexeex[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9d7e8d9af08ffexeexeexeex.exe
Size

971KB
MD5

b9d7e8d9af08ff9e6b0ca7e1b49a643b
SHA1

a230a02e51318ad169e1a59feda305ddba9ed680
SHA256

49876d4e21fec635ec25283f4a527e0c3568104c8c8e46009f818b5c42d66299
SHA512

dd8a73fd985c79b3497749035c274e2437ba1301127a704ff93f2258d9060593dbed8cae120a7350cbb8826d341cb1191e3dbd179fa5ee375c1587e945934684
SSDEEP

24576:KGmj8GFiYBcNDDot26QkBqbVJSm4SYN8xnHa+v+:KGmg/lDtx/14S/+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9d7e8d9af08ffexeexeexeex.exe

Files

b9d7e8d9af08ffexeexeexeex.exe
.exe windows x86

06fa29813db6c1f98441703604fe5cf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
ExitProcess

Sections

.text
Size: 578KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ