9913ffc891a41c7aee64bc6e96baa12b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9913ffc891a41c7aee64bc6e96baa12b
Size

83KB
MD5

9913ffc891a41c7aee64bc6e96baa12b
SHA1

1ba2fc5ea5e2c772d01ebf9b84bc5ded7aec659d
SHA256

156a69ea7ecb6527c745b7a0a7535e9be13a97cacd884382bfb51129b85c56cc
SHA512

7ca2efee178068d767a8142c1ecf428373c49d445a67db79f22e890603fd543e204e184ee722dae7ee048ddc7ccaa3ae688430267f116fe117391fa08e65f597
SSDEEP

1536:sKBKSoGPRZMBNLZOkKytrTC4m4HRWjw/D49qLpjVrs2ryrd1vUQuqwcizSkX:sK4SoGPRZMPFOatS4m4HRowk0LHs2quo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9913ffc891a41c7aee64bc6e96baa12b

Files

9913ffc891a41c7aee64bc6e96baa12b
.exe windows:4 windows x86 arch:x86

821a39d075fcc916ca28f5da4dae3f03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedCompareExchange
PulseEvent
QueryDosDeviceW
CreateJobObjectW
GetConsoleMode
SetTimeZoneInformation
lstrcmpiA
SetupComm
GetNumaProcessorNode
PrepareTape
SetThreadUILanguage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE