9791cda44dafed3fdd1c214739293ccf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9791cda44dafed3fdd1c214739293ccf
Size

587KB
MD5

9791cda44dafed3fdd1c214739293ccf
SHA1

78fabe3996302b5b7cd7dba549fb4d06768d13c0
SHA256

6e7a29b4c262d591570f170df725db4e5f694044ac9e980e7d22169c9297c8dd
SHA512

c2ecb01c494632546b8464ea14b03b205508adffcb48c89a25c4442d25c2bad054ab23f5038e5fd83fc11d818dea7ff232c58a24cbce224bf8b4dd423a952717
SSDEEP

12288:L/h4qZYzGqryxoISyGiVzdBQLLqaGnogk0RJOxTX+42O:L/h47GiI/G+zdBmqa2MDXi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9791cda44dafed3fdd1c214739293ccf

Files

9791cda44dafed3fdd1c214739293ccf
.exe windows:4 windows x86 arch:x86

6e1f282449492d5fc7a87e6f1c3ced5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 538KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ