09c6e2a51fbad64fa34b2b0d5c912a98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09c6e2a51fbad64fa34b2b0d5c912a98
Size

82KB
MD5

09c6e2a51fbad64fa34b2b0d5c912a98
SHA1

cf6a38268fda44a1c85ff32e634a79a1d646104c
SHA256

aa32967e57860ec8a4ba277a90ef6825d22d097c4ae763d97bad74b0c0982dab
SHA512

084085faf2448e1b0dec39f641091c6f4618b5167498674bb94fce4ab426c5dc1c690c185ad9ac12b7e86078f53a60b4317660b0fb638678af877b974d56e72b
SSDEEP

1536:V4V8HyzOvJtngfz/lbaR3TU4GceyJIyqNqQu1WDEHspm:KhOvQl+THeAIy3QNQHs4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09c6e2a51fbad64fa34b2b0d5c912a98

Files

09c6e2a51fbad64fa34b2b0d5c912a98
.exe windows:4 windows x86 arch:x86

99f5b0b723d6fca2813f516623081e1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 240B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE