9bff418f3f544442250798ec6985044e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bff418f3f544442250798ec6985044e
Size

946KB
MD5

9bff418f3f544442250798ec6985044e
SHA1

01586c205cf5679ec2cfcd203a944d5f7a1f1f53
SHA256

eb0e55fc3e0f70ce343d3f9baf45c249d619cb20e77d63d2f9e9079ae1e11b30
SHA512

02d35d95f3beb0da9d914e9e790d5d25d3db8468fecee2cb7ab470b902561786ea3d769a304f4cfedccea1fbfb25ed4939f62f553929c6e3e5afa1601d5e9e6d
SSDEEP

24576:MGWyXtepOTmqYwNoB1RomVTlXUNrXmJguUF:4yopOq8CtoSJMDmJguUF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9bff418f3f544442250798ec6985044e

Files

9bff418f3f544442250798ec6985044e
.exe windows:4 windows x86 arch:x86

2ff8daa8b51f385e7b24338bce705489

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CompareFileTime
EnumSystemLocalesW
FindAtomW
DeleteFileW
EndUpdateResourceW
VirtualProtect
ExitProcess
GetDriveTypeW
GetAtomNameW
GetDateFormatW
GetModuleHandleW

Sections

CODE
Size: 407KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 488KB - Virtual size: 630KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ