fc9d886efb7d7939531d199693aefab0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc9d886efb7d7939531d199693aefab0
Size

19KB
MD5

fc9d886efb7d7939531d199693aefab0
SHA1

97c4183f1e9e7652cab95f53438e112e2000d93d
SHA256

1853d89393ca472ee1655e28fb2fb52059ee37601fe677fb3b6dfc2fe33feb2d
SHA512

c0675e50ef3a20f2112b84af2175cd64323268210a0fbbdafdd9728987131e64fe47bd98f5b786795920209504e7b07215f38414062cc2e8667bb28666afdc64
SSDEEP

192:ZdSekEVgsoqe0jc1M7cLa2gcKiQWm/L32S5WpkdbXftbr0RZzDquk:ZdSeP+M7cWoKiQ/iSU6dbXlbr0RBq/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc9d886efb7d7939531d199693aefab0

Files

fc9d886efb7d7939531d199693aefab0
.exe windows:5 windows x86 arch:x86

9bdeb3d243b47ce5aa03f899f7f8334d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
PostMessageW

kernel32

CreateFileW
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetModuleHandleW
FindFirstFileA
FindClose
GetSystemTime
ReadFile
GetProcessHeap
CloseHandle
GetFileSize

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ