c9b6609c2e32354bb8b548b776562ab1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9b6609c2e32354bb8b548b776562ab1
Size

84KB
MD5

c9b6609c2e32354bb8b548b776562ab1
SHA1

71fe3e44c75a6d4000d05f8bb7bc61f43ae8f49f
SHA256

f9d234db49f46845e3d4db8a3b2e2d16782adda6631a66577f99b5ed0f12f487
SHA512

48ccca873ebeb2b13f12fa0f9e60a87dd2a0c10199708946a5b10b96bd3031def7733ce6cd41b366f5dbcda9cbd2532566c478341ad1b3569fd51e59853e5de0
SSDEEP

1536:9tsUFsahZTXNbOGlmNkraqAYfsDMFUbO6wcj+6Qxm2YkA:Xlhzc+a8sDMFUSGj+bxm2PA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9b6609c2e32354bb8b548b776562ab1

Files

c9b6609c2e32354bb8b548b776562ab1
.dll windows:4 windows x86 arch:x86

b101851dc574481d069f91f8f2b4c99e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GetCommandLineA
GlobalFree
VirtualProtect
DisableThreadLibraryCalls
IsBadReadPtr
IsBadWritePtr
MultiByteToWideChar

msvcr71

_except_handler3
malloc
wcslen
wcscpy
rand
free
_initterm
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ