9d4e6cb6b12f78dc3c05cc20a63c3708[.]exe | Triage

Sharing

General

Target

9d4e6cb6b12f78dc3c05cc20a63c3708.exe
Size

94KB
MD5

9d4e6cb6b12f78dc3c05cc20a63c3708
SHA1

7b02508722cb81959dabfc8f8d5f184fe7cf3182
SHA256

8df0d4ba18197b3cb53708b62bf529c756562df85d1b9419b6cbe84f3d014571
SHA512

b1eda882195ece536883bb85188aeedc6f7f1b12ae0afec502b97294546e90630a632cc5ca1782f4b6eb45326a07316033f186b10481b24eccb2eb26b625d7dc
SSDEEP

1536:vaL56b2nMOc3GMm/Lb/zWZj/DDz8SFPpPqBuw2O116NTxtDW1OggTcVkO:iQy3c3GMmWlTbF1qBuwkbER

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d4e6cb6b12f78dc3c05cc20a63c3708.exe

Files

9d4e6cb6b12f78dc3c05cc20a63c3708.exe
.exe windows:65535 windows x86 arch:x86

fffc33ad8ec7c416d4d4ed5ccf329cf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
EnumResourceLanguagesW
CreateMemoryResourceNotification
FindFirstChangeNotificationW

ntdll

isalnum
ceil
isalpha
ispunct
abs
sscanf
mbstowcs
strrchr
wcsncpy
strchr
wcstol
toupper

msvcrt

_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__argc

Sections

.text
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ