9f42a7790f14c3e857f8f2a26b6631387e93260d7c29e04f1a79e480bb3f0109 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f42a7790f14c3e857f8f2a26b6631387e93260d7c29e04f1a79e480bb3f0109
Size

2.8MB
MD5

81145190d0c6cb7c04a3c7b8de03fd16
SHA1

6163842bc49c3dce3a4af3b0d941d5456368fb7e
SHA256

9f42a7790f14c3e857f8f2a26b6631387e93260d7c29e04f1a79e480bb3f0109
SHA512

5644cda8f68470411d086894271e6324d8a033f4a6d19db0cedcd8cae8ed807652c37c82641f66c1705bd0616156a8ec13d2afc4a46e41e5cf0c596a73305d31
SSDEEP

49152:lMogPZktaVfaQ2WShLvhFAumXAc7rF7IE:DkZktBhhLIubep7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f42a7790f14c3e857f8f2a26b6631387e93260d7c29e04f1a79e480bb3f0109

Files

9f42a7790f14c3e857f8f2a26b6631387e93260d7c29e04f1a79e480bb3f0109
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ