f9c64098f642d9763110d2c2b321dd76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9c64098f642d9763110d2c2b321dd76
Size

20KB
MD5

f9c64098f642d9763110d2c2b321dd76
SHA1

eda3ddd5504b256aa09c9a2ab391a7e8241185da
SHA256

c619eb5c8193b01cff82eb32096ad904a49f2ede21eb41a4320f36c10b316ef1
SHA512

07f305260d58d62a6e1c75c43eeecc8543fb6463645544e9c833ea61280ad8bd046fbdb9f970036f5ea835cbb1ca1b8a2504efd40a176eb97485b31f98f35a2d
SSDEEP

384:QDyrLLmkfW95XWYEDOJ4ZZrHm0x46Zzs9dc2Q:UyJfWHXpdyZZrGIM7Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9c64098f642d9763110d2c2b321dd76

Files

f9c64098f642d9763110d2c2b321dd76
.exe windows:4 windows x86 arch:x86

63a6647db57626454059b94b7ad154eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlRandom
memcpy
strlen
memset
memcmp
RtlFreeHeap
RtlAllocateHeap
_strcmpi
wcscat
wcscpy
strstr
_strlwr
strcpy
vsprintf

kernel32

GetWindowsDirectoryA
lstrcmpiA
HeapAlloc
FreeLibrary
HeapCreate
CloseHandle
VirtualAlloc
VirtualProtect
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
GetProcessHeap
VirtualFree

user32

ShowWindow
DialogBoxParamA
CloseWindow
SetWindowTextA
PeekMessageA
SendMessageA

gdi32

CreateBitmap

Exports

Exports

_strdup
free
malloc
rand

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE