9c0076eb92d11a4165bd6060b4619c54 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c0076eb92d11a4165bd6060b4619c54
Size

359KB
MD5

9c0076eb92d11a4165bd6060b4619c54
SHA1

3593b6577b854eb011bc6e017eee197a0b8ff9c5
SHA256

fe52d3b1cccc6b9064de4d36391934a67b191a621bea19c2665b9cd94f7f0c71
SHA512

9c922bcf735f190e5f7fa328d67fab4912177163cd094583f09775485d90b50434d8bb8d99e37578a081fd8a1ba4fbf1cf5ad610c3f5bfe103d6bfd7367b453b
SSDEEP

6144:WzqkbR0DPo7WM4eLZyW7qJerBhPCckOISK:WzqvDPKWJeOuNK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c0076eb92d11a4165bd6060b4619c54

Files

9c0076eb92d11a4165bd6060b4619c54
.exe windows:4 windows x86 arch:x86

0adb6eb9ca16a09510a6c0832669004e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCommandLineA
HeapAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ