9c5efdd38ed259ff6554bc3074062d5c | Triage

Sharing

General

Target

9c5efdd38ed259ff6554bc3074062d5c
Size

83KB
MD5

9c5efdd38ed259ff6554bc3074062d5c
SHA1

7400f76240c2687a94603110de977b6b0519f8f0
SHA256

c5cd90d38b21514215ddbdbe6ccbb29ef2634b7ccf8de5fa3ed84d831b6ed278
SHA512

65f1ab843e49e5f82bdf0bc4b08d1d622043418a645703d531b29ab023110a6d059ec1b175ffefddc53310c9e9dbe7586793bd0f867693ce4eac4efde1f1d23c
SSDEEP

1536:GmHpPvb1aRbGKOTMeVopdwQ7s7K+CWqC5TiyidYEfozy6bTjEErxTWDTMqhGKYIy:Gmq/snqxyuoBvjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c5efdd38ed259ff6554bc3074062d5c

Files

9c5efdd38ed259ff6554bc3074062d5c
.exe windows:4 windows x86 arch:x86

0e1a65eb1fa497e71ad6139196363978

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressA
EnumSystemCodePagesW
GetConsoleKeyboardLayoutNameA
GetDefaultCommConfigW
EnumUILanguagesW
GetPrivateProfileStringW
GetConsoleTitleA
CreateRemoteThread
PostQueuedCompletionStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE