9bfb6ccbeb0915ca3c8201a090692f1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bfb6ccbeb0915ca3c8201a090692f1c
Size

40KB
MD5

9bfb6ccbeb0915ca3c8201a090692f1c
SHA1

4a4a2464bdccfc3e6d0d5c5fe63e857adf29ad25
SHA256

c26a507d59f1e724f978d0f23ed5d1168fdc494d0c26024b39194a7b00d4e1d3
SHA512

93d43389e7081beb863259b394ff4d2c18d66d5ef002577944b2978561daefa561f562406a836763a7286ce66907ab751bbf46a145c15a050fbd2a55c052630c
SSDEEP

384:U7Y7jvnpIXbibqO9b7IkRd3bc955fURkfVl82vSCoZU6T7lGq5:U7Y7jPkBk4mOCRIa2vRkU6T7lb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bfb6ccbeb0915ca3c8201a090692f1c

Files

9bfb6ccbeb0915ca3c8201a090692f1c
.exe windows:1 windows x86 arch:x86

dfdae17a1eae62cd688c36ef2fdba0c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

EnumDependentServicesA
EnumServicesStatusA
GetCurrentHwProfileA
GetEffectiveRightsFromAclA
GetFileSecurityA
GetMultipleTrusteeA
QueryServiceConfigA

Exports

Exports

Xgfsv
Zfdd

Sections

.text
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE