9af80582eb7ce66a171a60d6da552fb4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9af80582eb7ce66a171a60d6da552fb4
Size

7KB
MD5

9af80582eb7ce66a171a60d6da552fb4
SHA1

74a394a39500e434e2427ffd85637416e4f23aa3
SHA256

9d7a133543306f87e7e40a45e90dbc73e02482db8682e6c82f976e53447e0f92
SHA512

b45f13fcb90cbed1d7c1c90a5f57466e3a35e9c83bb09264955358fa889fe0a8cad340cb1fbfb882e75f5e06c4b42ea5f6d08f393f3e2d2c3bef213cc038ecc1
SSDEEP

192:YaC8xeJliR1e8DOWmg8Z3zcJ2vkZArP+dqxZPXpo:xLxp/e8o7c3uj+dqxZvpo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9af80582eb7ce66a171a60d6da552fb4

Files

9af80582eb7ce66a171a60d6da552fb4
.exe windows:4 windows x86 arch:x86

05dc643f85b2d775317095da6359c7cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
WinExec
GetTickCount
GetProcAddress
LoadLibraryA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetWindowsDirectoryA
MoveFileExA
lstrcatA
GetVersionExA
GetLocalTime
ExitProcess
Sleep
CopyFileA
LocalAlloc
FreeLibrary
RaiseException
GetLastError
InterlockedExchange

user32

wsprintfA

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
_itoa
fopen
fscanf
fclose
_stricmp
strchr

rpcrt4

UuidCreateSequential

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ