9c2f100afeb5febbf0cad6abd59b388a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c2f100afeb5febbf0cad6abd59b388a
Size

212KB
MD5

9c2f100afeb5febbf0cad6abd59b388a
SHA1

2e371275e1b8a102b0e3950bff48d7476091a2fa
SHA256

2cacbc305bf2242134cbe8770e22fa235fe2187324743811a69a55d1f8394383
SHA512

730433fb7348b82d32709d20859e7f782ae7baff465ce8dc29bdffd9cace081b0d58801b13c814c3e3be9b0cff732fd2e70f5ca518138dacd444cfa65667a1a9
SSDEEP

6144:fSE0Do5ACHZrsWSdtVop7/dhM6xM/TjEvW:KE0DXoZrs3dtEwI8jEvW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c2f100afeb5febbf0cad6abd59b388a

Files

9c2f100afeb5febbf0cad6abd59b388a
.exe windows:4 windows x86 arch:x86

16efa86aec6a0604ddc0f8c2c99794b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetTickCount
InitializeCriticalSection
GetCurrentDirectoryA
HeapSize
IsBadCodePtr
GetStartupInfoW
GetModuleHandleA
GetTickCount
ExitProcess
CreateFileA
ReleaseMutex
CloseHandle
FindAtomA
GetFileSize
ResetEvent
GetEnvironmentVariableA
HeapDestroy
SetFileAttributesA
ResumeThread
SetEndOfFile
WaitForSingleObject
FindClose
DeleteFileA
HeapCreate

wininet

FtpDeleteFileA
DeleteUrlCacheEntryA
FtpFindFirstFileA
FtpGetFileA
FtpCreateDirectoryA
FtpGetCurrentDirectoryA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpPutFileA
FindCloseUrlCache
DeleteUrlCacheEntryA
HttpEndRequestA
FtpOpenFileA

rasser

PortClose
PortClose
PortClose
PortClose

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ