c9b7a9e3d3f3e40bf9df02d7f5533b8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9b7a9e3d3f3e40bf9df02d7f5533b8e
Size

234KB
MD5

c9b7a9e3d3f3e40bf9df02d7f5533b8e
SHA1

4d0631c50922fb0995c3626ee68a1d995e5661c8
SHA256

e0d0a93acacb7966191687083b916ab3464497cbae1d0e3b23e97ce59423ffd9
SHA512

804e7735aebb2716e185657924bd14b0693cb0b94460dca12babfe03dee4040aef90ace91adf30e6ef87348537c096d1ee09ef666c29104c0cab2bfe44fc849d
SSDEEP

6144:XCHyKZ2qdIdlagmFyWOLBrknNwZhaZUnoJqqeciA:KyCdIHCIVLgvjqOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9b7a9e3d3f3e40bf9df02d7f5533b8e

Files

c9b7a9e3d3f3e40bf9df02d7f5533b8e
.exe windows:6 windows x86 arch:x86

e6962b437f02d79e5a944d7246165234

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

CharNextA

advapi32

RegCloseKey

comctl32

ImageList_Create

Sections

Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 472B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE