9c448960a284883dea813bfb6ccd4d39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c448960a284883dea813bfb6ccd4d39
Size

10KB
MD5

9c448960a284883dea813bfb6ccd4d39
SHA1

794af32986bd65ad5f16ff787cc5f2a99ad6d33d
SHA256

c614ff2194d02cc5b83dc44b9eb30ff0fcf426aafd0c44d3d66e2c148fc21670
SHA512

8ee97427369a6fc5e057b134578ae7d3576831681d6c4599573454b160b79b438af6cd451f62243631a4c641cc1e3effb36c6d999bf22902d455a305134bb22d
SSDEEP

96:bIewwvC35aXRcL6/QwDqnHBqLw9MBknXSq3WTYUUW6lq8DDeJDL8I8p:hU5aXRc6YqqnyBe3WPUW6lq8uDL8I8p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c448960a284883dea813bfb6ccd4d39

Files

9c448960a284883dea813bfb6ccd4d39
.exe windows:1 windows x86 arch:x86

4956a7a2427d242d80fc47053fe92b7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringA
wsprintfA
MessageBoxA
DestroyWindow
CharNextA
CreateWindowExA
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassA

kernel32

FreeLibrary
GetProcAddress
FormatMessageA
GetCommandLineA
SetErrorMode
LoadLibraryA
ord35
ord37
ExitProcess
GetModuleHandleA
GetStartupInfoA
ord36
GetLastError
lstrcpyA

gdi32

GetStockObject

shell32

ord122

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ