b9c408e356b75238964f50ba9b8ec2e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9c408e356b75238964f50ba9b8ec2e0
Size

161KB
MD5

b9c408e356b75238964f50ba9b8ec2e0
SHA1

4bf353bf119e8d55a47e97ef87f25261f147036b
SHA256

0c7de2aa0d28b725e7fd8e33395cd4ad22d97080af148b8cb94364bf79143e1c
SHA512

f5dba5fc60bef429ffa23953f0aa9609b87b2b6ec144e6cf6976336b2a7dc3e42b47ebbee75995cfc540194b2f217788727d6a29d6fc4615e1f51b099c0633f3
SSDEEP

3072:so7KXrjAVEVcxskDkBZdVJt6n2XOiMxu1cve:ebEaE9D6plXOVscve

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9c408e356b75238964f50ba9b8ec2e0

Files

b9c408e356b75238964f50ba9b8ec2e0
.exe windows:4 windows x86 arch:x86

5db0d837566e5cfc53df86419dd04b6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrcatA
ExpandEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetVersionExA
VirtualAlloc
CloseHandle
CreateFileA
GetWindowsDirectoryA
GetLocalTime
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
HeapReAlloc
GetStringTypeW

shell32

SHGetSpecialFolderPathA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

ws2_32

gethostbyaddr
inet_addr

Sections

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE