f9fb08ed4f08993119ae5e8b299ea601 | Triage

Sharing

General

Target

f9fb08ed4f08993119ae5e8b299ea601
Size

51KB
MD5

f9fb08ed4f08993119ae5e8b299ea601
SHA1

a48a9c554e9ae628d93d81d69cc9aa193bedef64
SHA256

d4849995e9cf86d8a9bb9b7f87fda789434ac7c4358cf2c1fe99ccbe01af361b
SHA512

ebdc8fe0c817049e8a63238ae62b593d412d04559c5d534071602b168d7f9b67e5185473b46022b94bd6472562cc79067501e389c930e56df45d611a455c00be
SSDEEP

1536:uI1trRSGvB+c9ukzEF6q0J5mAE1oVW+EDkQI:uWrYyBNo25mAESVWPAd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9fb08ed4f08993119ae5e8b299ea601

Files

f9fb08ed4f08993119ae5e8b299ea601
.exe windows:4 windows x86 arch:x86

87e4e8bfa283b458a164f7750159646b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
CreateMutexA
GetLastError
GetStartupInfoA

msvcrt

printf
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit

ws2_32

gethostbyname

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ