9bb53115ea30bb2b3bddb6e131a97cb0_console[.]exe

General

Target

9bb53115ea30bb2b3bddb6e131a97cb0_console.exe
Size

32KB
MD5

9bb53115ea30bb2b3bddb6e131a97cb0
SHA1

8ca145d56fdc76d5abdb6c1cc4e02e6913003642
SHA256

2d60c3bb859e33c31b014bfb4e9b4bd496063902f5dac396bc361dd67a7ddb32
SHA512

5a7ec5c0264c45564c1d22d3bf2d336e2fccc845b3856651f4ad3e981d91017e53430f0de0e9648415cfbb8e500ceced7a887521a197646c7b8962f58bfe71c3
SSDEEP

192:OXeA1zlTxDurzfQWpmKl9rkw1EuztUOkUcP4dWYwW:HAFlT5uHfQWpxliuzH64dWYwW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bb53115ea30bb2b3bddb6e131a97cb0_console.exe

Files

9bb53115ea30bb2b3bddb6e131a97cb0_console.exe
.exe windows:10 windows x64

8970a513038eb47c18c01c23c3893b4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegOpenKeyExW
RegCloseKey
RegDeleteValueW

kernel32

FindClose
GetLastError
ExpandEnvironmentStringsW
TerminateProcess
GetCurrentProcess
FindFirstFileW
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
Sleep
ExitProcess
FindNextFileW
HeapSetInformation
UnhandledExceptionFilter

msvcrt

_cexit
__CxxFrameHandler4
_vsnwprintf
?terminate@@YAXXZ
_commode
_fmode
__C_specific_handler
_initterm
__setusermatherr
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
swscanf
_wtol

clbcatq

ComPlusMigrate
OpenComponentLibraryEx

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8970a513038eb47c18c01c23c3893b4d

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

clbcatq

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 2KB

.pdata Size: 4KB - Virtual size: 312B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 48B

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 2KB

.pdata
Size: 4KB - Virtual size: 312B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 48B