9[.]exe | Triage

Resubmissions

09-10-2023 22:51

231009-2swpsagh91 10

07-09-2023 18:35

230907-w8hj7sch9z 10

Sharing

General

Target

9.exe
Size

596KB
MD5

0d73a7a18577fa6c81d0ccbe6a92261e
SHA1

50012f0552e00b6055e486ee0ec43fed9f76ef79
SHA256

cc9d10b98fd094d95ce155a5815e039a3eb6f3545708564c09e27834dc3768ab
SHA512

a82632e99848b819d80e5d1327033b0fd00f8a608e960882bf8e90c8b62fefba823c53fa0514746b822ad3ed54bb946ead29d935a296f0a39e2d44b32075955f
SSDEEP

12288:9rwVav5KOhU9lPu2OSTXbIdmRzAtI2mghQhyv2udR:9gahKOhU9tNXuXmgy6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9.exe

Files

9.exe
.exe windows:6 windows x64

7e5590227ad3aecb2feedda5da4da1cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateFileA
CloseHandle
GetLastError
CreateActCtxA
ActivateActCtx
DeactivateActCtx
GetFileAttributesA
LockFile
UnlockFile
SetFilePointer
OpenFileMappingA
CreateNamedPipeA
WaitNamedPipeA
ExitProcess
VirtualAlloc
GetDiskFreeSpaceA
GetDriveTypeA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 285KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ