b9ad85fc4dde6a802a43115f47fd7b30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9ad85fc4dde6a802a43115f47fd7b30.exe
Size

119KB
MD5

b9ad85fc4dde6a802a43115f47fd7b30
SHA1

d2525a1262d3bd8fb96befef0450c4db66a51384
SHA256

442cf20c333a036b12152b5576a022aa51098c03a1f4257782cec5782fea936f
SHA512

0f7e1668119fb9fccaede0b17431edd44d00f8cd7d1b1f9391cf099685cde77261cda8177c7c0a2e9468b68cf4c0cfd8be4d848d6ee19e3b4f7f572e60a2733b
SSDEEP

1536:rKfLJWpgNTkmCs8j9Fk4jipy+jRSvhokPPX7eKH1+nAwXcI8yRvezpf3yAmxot:uopDa2buNjgPPX7emgzikeV3jLt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ad85fc4dde6a802a43115f47fd7b30.exe

Files

b9ad85fc4dde6a802a43115f47fd7b30.exe
.exe windows:4 windows x86 arch:x86

15a07ab988ed15d9964b3de31b97b75d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
GlobalGetAtomNameA
SetSystemPowerState
RegCopyTreeW
BasepCopyEncryption
CloseHandle
ReleaseMutex
RestoreLastError
CreateHardLinkA
SetConsoleMenuClose
PeekConsoleInputW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE