9b5a869f792b825e8f1f4b048112d341 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b5a869f792b825e8f1f4b048112d341
Size

168KB
MD5

9b5a869f792b825e8f1f4b048112d341
SHA1

3f2dfad7c66d16061c80823dd951ddf92ef34b84
SHA256

fc7b4fe39705b2455a4533f1b644de390a580f7f6c9cbee47379233c66db3a99
SHA512

6b8bb0f2cffa3269c1c2adf9471cc915dac5e3bb9380657f35a750f5b26741a3d1cd4fb16e5cb51a7ce403324fed0a17f4b2bdd70de096473371af3594cbb061
SSDEEP

3072:lrlObjvS2tYQ+b1DO0r3CKZ+kKMBoooHmPIDeHsfibuDDp:NlCvv6rb1JCKZ/qooH6R8vD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b5a869f792b825e8f1f4b048112d341

Files

9b5a869f792b825e8f1f4b048112d341
.exe windows:4 windows x86 arch:x86

df562bd16902b093e641f1c16c90feba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleKeyboardLayoutNameW
InterlockedExchange
SetVolumeLabelW
SetCriticalSectionSpinCount
lstrcpynA
WriteFile
GetOEMCP
InterlockedDecrement
SetConsoleNumberOfCommandsA
ExitVDM
Thread32First
ReleaseSemaphore
HeapReAlloc
FindResourceExA
GlobalFindAtomA
IsProcessorFeaturePresent
lstrcpynA
DuplicateHandle
TlsAlloc
SetThreadPriority
SetCurrentDirectoryA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ