9c3135c9137d2e8f559947a3ee2f3c85 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c3135c9137d2e8f559947a3ee2f3c85
Size

28KB
MD5

9c3135c9137d2e8f559947a3ee2f3c85
SHA1

0cc8ac1596f53ae78df108282412613b9d82622d
SHA256

c7fac10bfbc9fef5d1e8a4b0cec58dc4754b99a3286b5f04e16131328e82ce1c
SHA512

0190c7aed85b3e4e8c948ac41ea5dfd7651c40f4cdf3ded240641c742680126c285234a55c588e229a775799976472374a1b224420c740b5028fbd2797b8127d
SSDEEP

384:6kCKgAUzltKLhs3rLT18bm/KKzyr0FF9P31Vl8dg/SKqOHAQWAO3BOHgrOfmICWc:/klQhE/18bmCWFF9P3CdcWPBOHCOepz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c3135c9137d2e8f559947a3ee2f3c85

Files

9c3135c9137d2e8f559947a3ee2f3c85
.exe windows:4 windows x86 arch:x86

f6734c09bb3b491b339f43df7c6ae1c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetConsoleAliasesLengthA
SetCommConfig
SetProcessShutdownParameters
GlobalMemoryStatus
GlobalCompact
SetProcessShutdownParameters
GetProcessIoCounters
GetConsoleMode
GetThreadSelectorEntry
SetLastConsoleEventActive
WritePrivateProfileSectionA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

data
Size: 4KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ