9a57b3bcff7186e7a57cde230e64685d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a57b3bcff7186e7a57cde230e64685d
Size

68KB
MD5

9a57b3bcff7186e7a57cde230e64685d
SHA1

cfe072a0db1d36586a3abe810e0e3026d6b82f70
SHA256

f006cf856d011cd46f22661ef9f28402c595eb0c55d3d79c74fd137056611bab
SHA512

99b6250f541018c8c8eac1b99bc49fce7ff0bae594183ac85e8dc8ced41d9bf9cdf8d1e9b2f9f0b7c05d438fd5469f5d5dc5aea27fc89a7d6258b5f2756f35fb
SSDEEP

1536:TEMEro6xcCAKZcE311ZKwr9adIA451BpZF8otV1B88:m85CLjzwwrMdGBXvf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a57b3bcff7186e7a57cde230e64685d

Files

9a57b3bcff7186e7a57cde230e64685d
.exe windows:4 windows x86 arch:x86

4eac60f9ff4f2aa702fed2e8f5aab46c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
SetConsoleCursorPosition
RtlFillMemory
UTRegister
GetProcessHeaps
HeapUnlock
TlsAlloc
lstrcmpiA
SetSystemTime
BuildCommDCBA
NlsGetCacheUpdateCount
ExitProcess
GetStartupInfoA

Sections

CODE
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 46KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA