9876c6d8e21a33ea5864b30938880b77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9876c6d8e21a33ea5864b30938880b77
Size

698KB
MD5

9876c6d8e21a33ea5864b30938880b77
SHA1

63eb378860048c6bb2ed482d0216e13f357bdc11
SHA256

7bfbc794429bd6e1f7e5737df0a62c069e5108f5bb6fbfb8e9201c531f3c7552
SHA512

925b8dbb2f2a0da4ea2313b18852fe835847711341be13ab1fb6931ed06135ccdba64807900f460b814fdf456fc335d09c5355907f6c1da0dc0ebd21efa818b0
SSDEEP

12288:vfgNk49e3ESReWxyLZe0Do23O2tZjl8edz1ttfCf58/MSt2kLxDbfjQuj0c7r:XgNkodSReI4ZVD63ed3G5RgHv1Xr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9876c6d8e21a33ea5864b30938880b77

Files

9876c6d8e21a33ea5864b30938880b77
.exe windows:4 windows x86 arch:x86

c0c0e7ec3b50ed5ae4207ea3d06ac542

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetTickCount
GetCommandLineA
CreateEventA
CloseHandle

gdi32

CreateSolidBrush
GetTextExtentPoint32A
BitBlt
GetTextColor
CreateCompatibleDC
GetDeviceCaps
CreateFontIndirectA
GetTextMetricsA
GetStockObject
ExtTextOutA
MoveToEx

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 692KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ