09c625013b8d1693626edcb13cbc4d83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09c625013b8d1693626edcb13cbc4d83
Size

72KB
MD5

09c625013b8d1693626edcb13cbc4d83
SHA1

bb5acdf0fc22fa15b9b0c2c2de619d7222107956
SHA256

975ef46255a558d790446c3b6abf0e507488b12d06c6c53cfe4b291f91ecfc48
SHA512

058ff1ec2d16e8e9aa25eddfbb5afa7ce52f9cdf95b7e70642ffcaf06a2000162302166192819338821df7d4f98a62f759a72b5e303ec64b97a1c0cbf1e9b05f
SSDEEP

768:V9GUyCWytcCYoP3/1nsaqvBL4JkP+F26kKGlBcPfX9NQ3VwBxtc3mEk6V7Yo6Bqe:/lcCrhqvBL42F6/GEn7VC66yo67Pv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09c625013b8d1693626edcb13cbc4d83

Files

09c625013b8d1693626edcb13cbc4d83
.dll windows:4 windows x86 arch:x86

01b8a8b831cae103e89bda7b80cc4afc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileSectionNamesW
EnumSystemLanguageGroupsW
WinExec
CreateFiberEx
BuildCommDCBAndTimeoutsA
GetConsoleAliasesW
InitAtomTable
CmdBatNotification
GlobalGetAtomNameW
InterlockedExchange
WaitForMultipleObjects
GetCommandLineA
ExitProcess
GetStartupInfoA

Exports

Exports

Mwvurmdppgn
Muevqihykt
Cinssbycyxe
Uoejqtdjtvf

Sections

.text
Size: 4KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ