9c41ad4a926f2b8efac8f93b96b743ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c41ad4a926f2b8efac8f93b96b743ce
Size

83KB
MD5

9c41ad4a926f2b8efac8f93b96b743ce
SHA1

207a97dbe7f5e50a43fdd2c4d00a2ac866b0e0ae
SHA256

b2ef4a02c629c0212296959e8e1487c04e75da81adeea59f3dd318bb5f732539
SHA512

34743b882736761942b823fb90c1d05dc153fda22ce0459557b5afd78c5059d57a16b5a56d90b07bbfb13839112408dbdc657b411aca850706988685337542b8
SSDEEP

1536:IWNlKx9FN/x4wmOPhDdQ1HQPZaScAqY3PYGuzn6vrjEErxTWDTMqhGKYIZTET8bc:biv/efORUHwtXAGi6vrjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c41ad4a926f2b8efac8f93b96b743ce

Files

9c41ad4a926f2b8efac8f93b96b743ce
.exe windows:4 windows x86 arch:x86

ce328711ca4684dcbd09d764b8381fda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameA
GetSystemTimeAdjustment
lstrcpy
GetUserGeoID
InitAtomTable
FindFirstChangeNotificationW
FormatMessageW
UnlockFile
GetDiskFreeSpaceA
SwitchToFiber
GetFirmwareEnvironmentVariableW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE