d9f9b3b389299338ba62237ec94f664c9e8ada271b1cc1b0ebf4f07848b8c588 | Triage

Sharing

General

Target

d9f9b3b389299338ba62237ec94f664c9e8ada271b1cc1b0ebf4f07848b8c588
Size

5KB
MD5

eaf4c604ce7ad238dd7aa91725d59b6b
SHA1

2a700a10a669dc090d110b4b73be041c9b86096c
SHA256

d9f9b3b389299338ba62237ec94f664c9e8ada271b1cc1b0ebf4f07848b8c588
SHA512

67d33e4506c50b628d78ba346ae02b5959c970449cf7b834d7b43b72ab6a27341c59ab1e84b0924557fee9b714ac0c7deb934ed8ef4e110cebcd5c570b258021
SSDEEP

48:6hjvtHxWXZR/40l8aHzADzuLhQxrONvTrg78bGd1dn9orww7zL:kvtHwXZJ40lX6O2xrO9TrZKor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9f9b3b389299338ba62237ec94f664c9e8ada271b1cc1b0ebf4f07848b8c588

Files

d9f9b3b389299338ba62237ec94f664c9e8ada271b1cc1b0ebf4f07848b8c588
.exe windows:4 windows x64

dd53ccf47d9be49c64641fa9dbe06e5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOidCpy
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilPrintOid
SnmpUtilMemFree
SnmpUtilMemReAlloc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ