b9b67dbb64dde83b511a1e2405f2d787 | Triage

Sharing

General

Target

b9b67dbb64dde83b511a1e2405f2d787
Size

95KB
MD5

b9b67dbb64dde83b511a1e2405f2d787
SHA1

c14a1e8b15c1b70e793b24070883ebf3854d85aa
SHA256

e7362bec94bab654280e6bd86377637daf0539efcfa49db6a119a8be33a75729
SHA512

c09b9bb36b661fd8c3d4c7f3de8a1f71114d32d05b7c22cf9d9dc31fc4eb5beb8ec255ee1a187a4b1e0bd04a3f97a7370cc07e462ae5c32d37618c43c6fdd04e
SSDEEP

1536:/G+tr3WfKNkMeWkbEJYTddEQ8b1yXSlPC3CqjSHdDNodg3YL3N0j5Xh7+xbO:/G+tr3WiSNrW+ddEQigSlPCyqjS9Odr7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9b67dbb64dde83b511a1e2405f2d787

Files

b9b67dbb64dde83b511a1e2405f2d787
.exe windows:5 windows x86 arch:x86

783849e09dad24d656075a422aa027ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAlloc
CreateNamedPipeA
GetProcAddress

Exports

Exports

nkhaeyzovvnqzm
teowcgeanbrpm
xtfvftkkt

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ