9603c3bb5e82012e009fc7039288652f | Triage

Sharing

General

Target

9603c3bb5e82012e009fc7039288652f
Size

169KB
MD5

9603c3bb5e82012e009fc7039288652f
SHA1

abcc172510d340a2439d7a12d24225f25a08cb5d
SHA256

c2923165ea1811daf8562da01918240bed9b9fa20bc636ca62cbbd8b1d1745cf
SHA512

35802f7704cfb09ecd417b0a2f07bc1c0471a4ca62478787f5ef92901e3b88fbc46b59256cfd71c1cb4df3c4f06883e7cc85bd854c0415fbce68832bc9ae622d
SSDEEP

3072:KBt0Wwp2OgDGoXei9R8585BkVHgkXhDWtOD/UseCcQFu0GeMtOUUeApZWJr:f96hXF9R8jVHbxDWgD/Use7QFG+UVApI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9603c3bb5e82012e009fc7039288652f

Files

9603c3bb5e82012e009fc7039288652f
.exe windows:4 windows x86 arch:x86

101eb29b843f6be43b879f0f042698c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
SetTermsrvAppInstallMode
RegisterWaitForSingleObjectEx
GetThreadTimes
SetMailslotInfo
GetConsoleAliasesLengthA
SetMailslotInfo
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ