9c5e27f7bbca17e7e767c969f4415eec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c5e27f7bbca17e7e767c969f4415eec
Size

17KB
MD5

9c5e27f7bbca17e7e767c969f4415eec
SHA1

c3da38dbd3b18616803afc07e4b63341001c3677
SHA256

d182852f0eda25ef7aa5c5318700d7244f200bd30ca1f0771f4f62a0c1208ba9
SHA512

2dbb75657714765516e5096b078699602d35f0aa05a8eb135e5d0d54cc19bd04b11b19369b6cd97037fd97fd92bb1d42f079b2fa2ed74bb004311a0f8bb34321
SSDEEP

384:HF1brgE3cmZO2Zp+Nye8pqrmub8TyztsDN:HTIE3oKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c5e27f7bbca17e7e767c969f4415eec

Files

9c5e27f7bbca17e7e767c969f4415eec
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE