b9439750db8bbdc60ce2581bd609c84f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9439750db8bbdc60ce2581bd609c84f
Size

76KB
MD5

b9439750db8bbdc60ce2581bd609c84f
SHA1

854d70aa63ca2e37f3f7cb17b8f07610570a1719
SHA256

c681170f3292170b1f1adf81f83ac7ec1e304c818c8a5c24ad6aeab32cce68c0
SHA512

a30b399610b120e04cba15aa51a02e7f2530ce5adadf3ce2e520ec141aaf3d30824b28bf3e977841341696daf614626b892e69bdbd46a595ee9e1a3d91cefa13
SSDEEP

1536:WVVqTTUVCxge3dwTwbUs/lbRRFKsJdbOFpjVrs2ryrd1vUQuq6:WVVqPxJhb3dRRFNb4Hs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9439750db8bbdc60ce2581bd609c84f

Files

b9439750db8bbdc60ce2581bd609c84f
.exe windows:4 windows x86 arch:x86

c018dbcf3edff7a7511318061681d843

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessId
AddRefActCtx
GetFullPathNameA
VirtualBufferExceptionHandler
IsValidUILanguage
SetConsoleActiveScreenBuffer
GetFileSizeEx
BaseProcessInitPostImport
GetConsoleAliasesA
lstrcpyA
GetCommModemStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE