c9aa36d0c1ff7f587fd08b9a44b8e438 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9aa36d0c1ff7f587fd08b9a44b8e438
Size

636KB
MD5

c9aa36d0c1ff7f587fd08b9a44b8e438
SHA1

b387ef278b3334b2006155e0f3edc60db0c1325d
SHA256

8f82c2d0d3080b3eb57fcea2c7ca41084c89a3ac3366cd05a2559c172decf8be
SHA512

b674ac860154afb217ba288a2425445380dcd2d362d07e1d069249fe28228b8f377953d34970186c991845245eb3cdafd12dca4f0ffbc749ffb34cb1ff94cb35
SSDEEP

12288:V7jpS31ZxKSpzluJzNo15jH78WtvspyjriT/bmUH4Cu:tjcZxKcUt2JH7ztdmTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9aa36d0c1ff7f587fd08b9a44b8e438

Files

c9aa36d0c1ff7f587fd08b9a44b8e438
.exe windows:4 windows x86 arch:x86

4c2d66851b802e1163218e33eee50270

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
InterlockedExchange
GetVersion
CompareFileTime
SuspendThread
lstrlenA
GetStdHandle
GetAtomNameA
GetConsoleCP
HeapCreate
LocalSize
CloseHandle
HeapReAlloc
LoadLibraryExA
GetTickCount
GlobalUnlock
GetSystemDefaultLangID
WaitForMultipleObjects
GetModuleHandleA
GetCommandLineA
VirtualProtect

gdi32

Escape
CreateICA
CreatePalette
GetRgnBox
BeginPath
GetStringBitmapA
EngLineTo
EndPath
AbortPath
GetMetaFileA
GetTextColor
EqualRgn
GetMetaRgn
DeleteObject
DeleteDC
FloodFill
Ellipse
GetFontData
CreateFontA

winmm

CloseDriver
OpenDriver
auxGetVolume
auxSetVolume
PlaySoundA

secur32

AddCredentialsA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ