9b0997216aa855f832449f4253aab0a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b0997216aa855f832449f4253aab0a2
Size

24KB
MD5

9b0997216aa855f832449f4253aab0a2
SHA1

5b3a2bd625edd09f4e9884e8109bb3d7eeec414b
SHA256

b0795c76a7a62d4e8efe27ca4664abfb647039901d00916d6195986a905c6e78
SHA512

d3d97e182ff5054f70f8e43503ea05e11f9fd64f35f09fcd18ee25f699743d5c07fbe9ee9f8a88c32df9afdad295a1b60bf62bf3ef06dc5724bb86fd1e3630c4
SSDEEP

192:zzyZF2baVl3KlVVPcm17RejIvi79gW+WtvbNP1oyOKoKQ9Z1:zOSnRUm17Resvi9j51QKo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b0997216aa855f832449f4253aab0a2

Files

9b0997216aa855f832449f4253aab0a2
.exe windows:4 windows x86 arch:x86

0403334ef0892045bca233dd5598e020

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
Sleep
MoveFileA
DeleteFileA
CloseHandle
WriteFile
CreateFileA
CreateProcessA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

isalnum
div
ceil
atoi
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
isalpha
sprintf
rand
srand
time
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atol
_access
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ