b9b91845840169fb86a4423b60b6784e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9b91845840169fb86a4423b60b6784e
Size

124KB
MD5

b9b91845840169fb86a4423b60b6784e
SHA1

37089cb226d628554430483150d4647225ec7c71
SHA256

9426ed6a128f72f17fcbb6281cfdb716f297c4ab37bdf90ba568152173fb6a34
SHA512

16250dadea285885a79c69a3dfc9479ce7b47c02efa19213b1136c3f4eec60bf318200a433287a35aba9421d07c6ec118453038b855d98c0528051d825f0f919
SSDEEP

3072:nkUaNI4Yg7uVWUsIfVWpYXg155h3hOSUnOhmq69E:Q392WUseIb55FPUOUq6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9b91845840169fb86a4423b60b6784e

Files

b9b91845840169fb86a4423b60b6784e
.exe windows:4 windows x86 arch:x86

4fc1185b18f74b57f57439e918957cc0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
WriteConsoleOutputCharacterA
Beep
LockFileEx
WriteConsoleInputVDMA
ReplaceFile
CreateNamedPipeA
WaitCommEvent
CancelIo
ContinueDebugEvent
EnumLanguageGroupLocalesA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

rc60
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rc61
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rc62
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rc63
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ