09cb0581c4a0c52a282a2288b78547d5[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09cb0581c4a0c52a282a2288b78547d5.exe
Size

2.3MB
MD5

09cb0581c4a0c52a282a2288b78547d5
SHA1

1593db25dd1c810d2d704a32360a15af546566f9
SHA256

51ec8684a139d9fa9227d049d735b0b813a113b29d4bdf69bd657f8739ab9074
SHA512

bbcc7b8084891128f7d33a4efc7f970002ebed2ef0aba3d292948a7ef152ff2e0ea40abd4991ae5e716aff55532dbf7fd7e25a957ac470f211e96670dc52957c
SSDEEP

49152:zinx1h8cXZDlBClGiTvoSz78taqrZ4GVeKLnpIlQ:ziechlBClGiT38NrjewIO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09cb0581c4a0c52a282a2288b78547d5.exe

Files

09cb0581c4a0c52a282a2288b78547d5.exe
.exe windows:4 windows x86 arch:x86

b0dc8a0c263c0fc2358f5f301774dd12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateFileA
CreateMutexA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetLastError
GetModuleFileNameA
GetTempPathA
InterlockedIncrement
ReadFile
ReleaseMutex
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
WriteFile

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
printf
signal
strcat
strcmp

shell32

ShellExecuteA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE