9b7f01ea6914cccb4f0aa2ec2094d602 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b7f01ea6914cccb4f0aa2ec2094d602
Size

2.5MB
MD5

9b7f01ea6914cccb4f0aa2ec2094d602
SHA1

a5837a9a41209656da3b7bb5d3ca6446d89f1072
SHA256

5a975b4ea07f577d6a082e73c8e3c9a7c7ccee5a0e14fddade39a471ed366c1d
SHA512

c2288ed60c0f5252a332fa222d2f14b4ce6271d753ef5f39cb9d814099f8faf9f6ca34932dd9aa284a573b23f4cf1fee60b1c8244034bc029ab5acea16c7eeb3
SSDEEP

49152:CGIyVcbf04ExGaJoU16saYlzNRU7zVQPrljnC8U3rlEN5W7Az5:CGeUEObSWPxnCZ3rS67Az5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b7f01ea6914cccb4f0aa2ec2094d602

Files

9b7f01ea6914cccb4f0aa2ec2094d602
.exe windows:4 windows x86 arch:x86

dbd4a917f768952e721d224e51818d64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcat
fopen
fwrite
fclose
memset
__set_app_type
strlen

kernel32

GetModuleHandleA
FindResourceA
LoadResource
SizeofResource
LockResource
GetTempPathA
CreateProcessA
GetModuleFileNameA
WaitForSingleObject
DeleteFileA
GetStartupInfoA

Sections

.rdata
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ