9b33d05217d9902c200d5a8a70626e28 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b33d05217d9902c200d5a8a70626e28
Size

76KB
MD5

9b33d05217d9902c200d5a8a70626e28
SHA1

6523384e40319350c25e52183c2a713020cd6051
SHA256

8de1254ab95072afb4a8025f9efc6397c9f25150583f09986a8a4e6e150c61b8
SHA512

ddc3c9e271b611fc7fe8411b504e5ef654608bce79516e884584cd45acb3254479804fbd62d3c99609a5e860870c9009422f4217ffc077f0dcb5bcda4161c1b8
SSDEEP

1536:ikBV7R9dCtNZM+axSdjRGGXy6hWeOvG1E19byzKi3Q1zemEdwpsXcZplwy6CDlD+:1DqyImi4GcWrdE2o8MjBkMqhGKZTbx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b33d05217d9902c200d5a8a70626e28

Files

9b33d05217d9902c200d5a8a70626e28
.exe windows:4 windows x86 arch:x86

638b5e852ca93e96da634f49a4aea0fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimes
WaitForSingleObjectEx
GetLongPathNameA
GetProcessHeaps
ConnectNamedPipe
ActivateActCtx
GetConsoleScreenBufferInfo
SetEvent
GetStdHandle
InterlockedExchangeAdd
FillConsoleOutputAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE