b9fd3c228e87518a54ced56f50c95be5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9fd3c228e87518a54ced56f50c95be5
Size

43KB
MD5

b9fd3c228e87518a54ced56f50c95be5
SHA1

28d39f37f0d41ae57336804e9aba94ded3fe1165
SHA256

a0fdad44d8fcd937705663f899a34677990cfa2755801c936b097a7e08d212be
SHA512

7f6fe03851c9e641e5cb94e5de84f8c2c3f98c56425b8f268c057647fcfaa6d874cfeca1dda465476a0534399ff89b88676f42b9c8f3c39ae5af662dbf16e836
SSDEEP

768:UFFFyuaZEoXNlOsmH8mnq58eoLF57TehFzppnx01fY9XyCeG4jvIy:8FTaZEoXHO5a7oZ57Te3/nMg9XyPs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9fd3c228e87518a54ced56f50c95be5

Files

b9fd3c228e87518a54ced56f50c95be5
.dll windows:4 windows x86 arch:x86

a3127888f5e88e117aaa8fa297644344

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
GetCommandLineA
VirtualProtect
GetVersion
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLastError

msvcrt

__CxxFrameHandler
_except_handler3
_adjust_fdiv
_amsg_exit
free
_XcptFilter
_stricmp
_initterm
malloc

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ