9b4d76f5cf008c6d50d34bddb7c2497c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b4d76f5cf008c6d50d34bddb7c2497c
Size

117KB
MD5

9b4d76f5cf008c6d50d34bddb7c2497c
SHA1

1d5d2f864b483ef1440abb1039fe9bdee8bf0682
SHA256

cb53820719819f8151f1e81e6c6e593758c900102db3a51538e977ea5844a394
SHA512

7b2c743e689f2e7f82374ee2ff4af83e71c910bc4442b73f3c975d2754fa5c695377d5af8c8b079ff46022f76d629635c89d158f7b8c243d2db4701a86a51260
SSDEEP

1536:sVIAfXxrfGzH+5tAnpTSLqTqaY2hvdAJ9rQD2Jf:965OScn5jYoFADQCJf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b4d76f5cf008c6d50d34bddb7c2497c

Files

9b4d76f5cf008c6d50d34bddb7c2497c
.exe windows:4 windows x86 arch:x86

15a40fc888a24c3586ca9563306e006f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE