9a6a3f52299760a372dd3cf18073cf41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a6a3f52299760a372dd3cf18073cf41
Size

74KB
MD5

9a6a3f52299760a372dd3cf18073cf41
SHA1

ee964082577df5d1e4313e1cf261ef80aacbfbeb
SHA256

7ea9ca809c7017efc1eeae6948c4168b8be99c31b69a42ee918c51217270f712
SHA512

b2a889a9a40ee81da65da52fb2fb0a7a5e5620ada8cd6a9d346fc21cc7ed8b61b83cc14282c8268a30b260177a9c01fc07c1cbd1a65ea274ef4eb98b08e85991
SSDEEP

1536:4zm4mkjlvYjjMYKQ4ATGnPTdqTEhXw/OecBAN5UVWyANvxJ:4zBmkj7fQATdqIhXMOecBAvUVW7Nvx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a6a3f52299760a372dd3cf18073cf41

Files

9a6a3f52299760a372dd3cf18073cf41
.exe windows:4 windows x86 arch:x86

b117501c0a8a784ba74694cbe2f170a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_onexit
sin
strlen
_cexit
__p__commode
__setusermatherr
fprintf
_XcptFilter
fwrite
fopen
_except_handler3
__set_app_type
free
_initterm
strcmp
__getmainargs
fclose
_exit
exit
_acmdln
_stricmp
memmove
malloc

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ