9bf25eeee92e5f4bd49099a21779ee1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bf25eeee92e5f4bd49099a21779ee1c
Size

9KB
MD5

9bf25eeee92e5f4bd49099a21779ee1c
SHA1

a0bdbcadafaf997ad393a64d47e7182f6865c82e
SHA256

bdff0016090978755c89a1048bb2d82fedface7adde69cfa0ae214d17c59f02a
SHA512

1e5a1c5d61c7c866d05135e1e9c2945c5dab97d0adb454121ffccbedc7024f01dd2890f1691f551b7f6300c9e413f9722d83a8c89bf3ae632add010dcbf7abe2
SSDEEP

96:nPDn0MRc+NSW/ikp+O+/yMF1E9tYZnwfbJb:nLn/RvSW/Ncw9FZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bf25eeee92e5f4bd49099a21779ee1c

Files

9bf25eeee92e5f4bd49099a21779ee1c
.exe windows:1 windows x86 arch:x86

aa25bf63b57873c47f41aaf139fee93b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ExitProcess
GetProcAddress
GetModuleHandleA

user32

MessageBoxA

Sections

CODE
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vsp
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE