Win9-Downloader[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Win9-Downloader.exe
Size

67KB
MD5

dd76274bdfb7d699b7b6d8db98e474fa
SHA1

e0fced3fc82f8097ccc1d4746ab7f10e48d472ac
SHA256

97f9f71a243100b9e62f82467605f39ce0b79c61021cacf90bbdd953127d742f
SHA512

0ba6af153e1978c2f5182ae57ec9b0e3f9888cb9d1212f2a0ab8274ec1f93a1dbceb47aeaeb5f6c2227eb57d087a6263a338d69ec9f21cf4aff3bd7865df53b6
SSDEEP

1536:xB4YKBjOMnW3n8iZW2oW9C5b9w2ub/V6ABsUcKN53wD5I:xIBjV+9ZW2E5b9w2ABDb3CI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Win9-Downloader.exe

Files

Win9-Downloader.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ