c9c99b41672f1db3490eec85aeefbc35 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9c99b41672f1db3490eec85aeefbc35
Size

21KB
MD5

c9c99b41672f1db3490eec85aeefbc35
SHA1

0f45b8b7699ada061b7ec56a13f27f2d22182d68
SHA256

6d1184a11ee4bb4aeffb8b9a643b66a79ba444185fdd4ea8e9337cda0ec17413
SHA512

fab2f409ffbf70482a6f253aaa727ace76240c52b0bf578124d00ef0e0496650eabfaca97ead87c8211ce8180d83371d947d977e298697a32002b4d1d59b3601
SSDEEP

384:5/NCU2h9QX1Tqn2AvVbZPxQjn5eHKTOtVisecbmijXDIsZOlnfWjvOeo:dN32h9Q16bZPxQjnZOtgseciijEskln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9c99b41672f1db3490eec85aeefbc35

Files

c9c99b41672f1db3490eec85aeefbc35
.exe windows:4 windows x86 arch:x86

fdbe4360a2b40d19353548773ddb7933

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
CreateEventA
WriteFile
SetFilePointer
CreateFileA
WaitForSingleObject
GetModuleFileNameA
LoadLibraryA
lstrcatA
CloseHandle
ExitProcess
ReadFile
lstrcpyA
GetTempPathA
GetFileAttributesA
GetModuleHandleA
lstrlenA
GetProcAddress
RtlUnwind
WaitForMultipleObjects
SetEvent
OpenProcess
Sleep
GetSystemDirectoryA
ExitThread
GetLastError
CreateMutexA
GetVersionExA
CreateThread
lstrcmpA
ResetEvent

user32

wsprintfA
DispatchMessageA
SetThreadDesktop
ShowWindow
PeekMessageA
TranslateMessage
CreateDesktopA
MsgWaitForMultipleObjects
CharToOemA
DestroyWindow
IsWindow
CreateWindowExA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegNotifyChangeKeyValue
RegOpenKeyA

shell32

SHGetFolderPathA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ