b9ef0e4e179b0a048b55507637cd1257 | Triage

Sharing

General

Target

b9ef0e4e179b0a048b55507637cd1257
Size

72KB
MD5

b9ef0e4e179b0a048b55507637cd1257
SHA1

43c4b4f73fa874b629febded867efe7f0aa6ab2b
SHA256

e832f1f0cc5006448132c5608921b9f368d280c90cc9cd5b9b0600cd833650f3
SHA512

56e1533da5641e3ef599e7d4efe2b02ae614ccca6f205b63bc06d193fb2b245f2aa73e821f3d9aa9443c0fb7885ce4e46cbb121f631fab5b4cadad350d66d66d
SSDEEP

96:034B+ilutSm2I7NFDs4rsosNHRVODQ9cyub53SGOFY/b6VpYXYLeiVNNoyne:m4BDlKh7m9Bu0pYspYXYLecNNoyne

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ef0e4e179b0a048b55507637cd1257

Files

b9ef0e4e179b0a048b55507637cd1257
.exe windows:4 windows x86 arch:x86

d2f9fbff9377d2805aaa76d563a19888

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
Sleep
CopyFileA
GetSystemDirectoryA
GetModuleFileNameA
WinExec
Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot

msvcrt

strlen
_chkesp
sprintf
strcmp
strcat
fclose
fputs
fopen
exit
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_stricmp

Sections

.data
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ