9b941842637e3b685867204f858a3d8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b941842637e3b685867204f858a3d8f
Size

787KB
MD5

9b941842637e3b685867204f858a3d8f
SHA1

3b444523db7a04f4adb88ef2038038147d8604f3
SHA256

b8cd3af27bee15dbab1adb47bf19e9c8214f975aa4466dc0bcd4d73ffed63f81
SHA512

0e05e668878c976740ee1e735c53334e112a9ad3125e73a70a556d4aa9aaf3b13795c6c1a7720a7c79d39ab293e69c9d129e7f83c7479f0b5a9fa492b4dade9a
SSDEEP

12288:EmkgZAh24TxvCItYXJeGZv1bge9PSU076PnOMjb858/2aKg8r2uGHBOEvnMhM:ErA4tvdiXQGZ1b/PSR6JQ5pxGhOE0hM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b941842637e3b685867204f858a3d8f

Files

9b941842637e3b685867204f858a3d8f
.exe windows:4 windows x86 arch:x86

ecfc9aebff5e9821a22d4ff630840ffd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetCommMask
Module32First
HeapWalk
GetCurrentDirectoryA
GetSystemDirectoryA
UnlockFileEx
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ