b9e293becff213a5e312fc25bd8aa3aeb6d9837863baa67bbf32348e81ba66f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9e293becff213a5e312fc25bd8aa3aeb6d9837863baa67bbf32348e81ba66f6
Size

2.1MB
MD5

c07310ffc6d772d16ad1234c355b0f63
SHA1

8e465113be94c6ea24ea03a17652c4fdf3b407f8
SHA256

b9e293becff213a5e312fc25bd8aa3aeb6d9837863baa67bbf32348e81ba66f6
SHA512

bba7929d9bbe31ed6def15d6ee24c86cfa504596a34949603955f7c6a99e0e958ee7220ddbfd8b8615ad8c39eee7e76466797b4861845420c676319826e61df9
SSDEEP

49152:05LCaJwvTvl7QbUou+ASo4SmuNX2SHt4rcrWTnb:05HwvTt7QbUohoLmIX2et4r8WTnb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9e293becff213a5e312fc25bd8aa3aeb6d9837863baa67bbf32348e81ba66f6

Files

b9e293becff213a5e312fc25bd8aa3aeb6d9837863baa67bbf32348e81ba66f6
.exe windows x86

1a607053891b088bd957a44b507d57fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA

msvcrt

__doserrno

user32

ShowWindow

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 492KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 812KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ