b9f9f5203174394f4ad7664320173f2c | Triage

Sharing

General

Target

b9f9f5203174394f4ad7664320173f2c
Size

12KB
MD5

b9f9f5203174394f4ad7664320173f2c
SHA1

baf4f53df2164da9deb1100966159e43c1b84dca
SHA256

7fa333a20bef7fe4ac497c9c52777858281314f7267a30012bf068abfec53817
SHA512

deb23f77062dd688fd72b0a70a644faf8b245c10c899948dd1c7fec120e4fcc42e13d7be9ad4647ea7fb077804762315e09c9a19241b128bd0ced08e7265377c
SSDEEP

96:cmckDEgpCK1mIcS53gCToSrauC/a71yQtQKQYQ:cv4Ea8CE/a7MQjQYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9f9f5203174394f4ad7664320173f2c

Files

b9f9f5203174394f4ad7664320173f2c
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ