10c9a4358c43fbced0ecd61a4b1dfc83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10c9a4358c43fbced0ecd61a4b1dfc83
Size

31KB
MD5

10c9a4358c43fbced0ecd61a4b1dfc83
SHA1

c37c2890e1e2b508a8ff9c90c4fe32c151251fe3
SHA256

cd33ca6b4025ff43a0c3c46b47ff9403172045242a0575c01eccf289a9ebb957
SHA512

a0b2f51d363e53ba9406c01ed4a836614056ddaebd6509820c6f256e58019911e023ff99d4b95d934349810a17617f140c614e69c67d8bbf3f2aa41958e353a4
SSDEEP

768:YqNsHpchwJzVVcxK0ZQLyx551F1Wm3yZ:Y8ApK8V5oQuj51XWky

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10c9a4358c43fbced0ecd61a4b1dfc83

Files

10c9a4358c43fbced0ecd61a4b1dfc83
.exe windows:4 windows x86 arch:x86

dacf349546cebfc39584b2cae9363d7e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleMaximumWindowSize
EndUpdateResourceW
GlobalMemoryStatusEx
LocalFree
GetCPInfoExA
GetFileType
DisableThreadLibraryCalls
ReadConsoleW
AllocateUserPhysicalPages
DefineDosDeviceA
FlushFileBuffers
EnumLanguageGroupLocalesA
SetConsoleNumberOfCommandsA
DeleteTimerQueueEx
Heap32ListFirst
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ