9bd879aaef405961bb56b91c0e417b3f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bd879aaef405961bb56b91c0e417b3f
Size

83KB
MD5

9bd879aaef405961bb56b91c0e417b3f
SHA1

a35a66d0d41d5a0dc282db64fdc32cbf18b74136
SHA256

cb41b87056c96f00aee71d840e6c44d6c6762c69c2e28e25dbb9fbe956b83c92
SHA512

370bc136f2c0ccefb33026f76f07b04c85febd0cc1d455281bc2b0f0fc073c8b1e7a82056600fe3d4b6104d50ead3d748ad4a9c11383cd61cf6346d20b733ccf
SSDEEP

1536:D7PETvpIkhKCm31fMuE3PtSiaEr9k6vaP/pjVrs2ryrd1vUQuqwcizSkX:Do7peCylMuE1Z0Hs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bd879aaef405961bb56b91c0e417b3f

Files

9bd879aaef405961bb56b91c0e417b3f
.exe windows:4 windows x86 arch:x86

afc43853d4c70bef76d1d80d1d5f37be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy
SetDllDirectoryA
GetProfileStringA
CreatePipe
MoveFileExA
WaitCommEvent
_llseek
MulDiv
Heap32First
IsDebuggerPresent
CloseConsoleHandle
GetCommProperties
VirtualLock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE