9a0979da0601e54b81c8c330f07c51b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a0979da0601e54b81c8c330f07c51b9
Size

6.0MB
MD5

9a0979da0601e54b81c8c330f07c51b9
SHA1

fe14e93846edce4fdc7cf6737ca519cc3395f960
SHA256

99a8de6bd3148674f3fa4e1a9d2d8dd6b8e291d8d4472dfbdc26e77ea23afa9c
SHA512

689e5a08c4964c7368dcc12a68c640d8e569162a3a051ea5895761d1d748b928e087e325fc5c4c1310a5ff435a23ce529c5cc33ddcd47a39a9a6f689ed1a7bc5
SSDEEP

196608:LNGN31/DJsF44RxPsHwVlLEaqW0v296UPlA0oiQ:xGN31/DJsF44RxP2wBj6UPli

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a0979da0601e54b81c8c330f07c51b9

Files

9a0979da0601e54b81c8c330f07c51b9
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 2.3MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 157KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.imports
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

!Sugar
Size: - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.taggant
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ