b9938ae7bede66bd64727a6c6f1361cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9938ae7bede66bd64727a6c6f1361cd
Size

70KB
MD5

b9938ae7bede66bd64727a6c6f1361cd
SHA1

2b8be6322d9dcacaf8a8e4b1586bc15f35a19d3a
SHA256

af375a31ba1f70d1bff13f3b0f390cecb9ac3b271c7d721bb875ccb51ae65991
SHA512

cf75015c08580500dde4031b7da7e067a203fb7d0be63eb4a1d299203268b2c6d156ff281afef8f64242da25c3c2224f5e8e8d59b130834f8e68852a2269ff4e
SSDEEP

1536:VOCekXgUcLkwmqlAXTobFBx1sgpKTyfBNV6k6V/ud:VOCn7wmJXT4Ugiy6R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9938ae7bede66bd64727a6c6f1361cd

Files

b9938ae7bede66bd64727a6c6f1361cd
.exe windows:4 windows x86 arch:x86

573a8e3002c3a49e385a632af519e901

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE