9a6f0983b5cf064912e5697a5a623414 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a6f0983b5cf064912e5697a5a623414
Size

223KB
MD5

9a6f0983b5cf064912e5697a5a623414
SHA1

9438c9928204b8e8eeca28e531882f3e2f245c5a
SHA256

0e5853ff57c582add2d7ca5ea3b69929b0920dda6d50d1c35c2cbde5f291052f
SHA512

45ab2e5b80a9091e2e9d0d13e8eecfddace4b3dcf3ecab203076669bc29c755a7d1971f441ec3a57a57a2d345a4420dec6b2bec51bf42d55f42b23b96ddefc63
SSDEEP

6144:hScwcAZcDNkqTxkDx1iNTuQpruyATPlD1wOcJHr8rbxpZ:hScw1ZO9oiHATPlD1GHIxf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a6f0983b5cf064912e5697a5a623414

Files

9a6f0983b5cf064912e5697a5a623414
.exe windows:6 windows x86 arch:x86

439ff53323e9506db8654c0d8af9cf37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
GetConsoleOutputCP
GetLastError
GetModuleHandleW
GetProcessHeap
GetStdHandle
HeapAlloc
HeapFree
LocalFree
VirtualProtect
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrlenW

ole32

OleUninitialize

user32

LoadStringW

msvcrt

malloc
memset
towlower

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 765B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ