c9f74dcc8d89ddb8b9fab84e2c99dd76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9f74dcc8d89ddb8b9fab84e2c99dd76
Size

51KB
MD5

c9f74dcc8d89ddb8b9fab84e2c99dd76
SHA1

2c5585d26f12a9751de07d1f9cf1dd37f6ad3f06
SHA256

f0124b5342b4cce9d11cdbeec83c403b3abec9f858bfe2bff63b539b14d734bf
SHA512

b243d5835505d861874f883104d1c69c0091debedd5e4b0311b743b390f36397bd3cadf0c1fa3bca4a71917d5eeb1433df3ebcf4a8515ed85f3f89e828bb108a
SSDEEP

1536:lVNobwsN6CHKZKmP4SfltKfVsk912DcHpT8z:lzuwO6DZKCpfltKfVt12muz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9f74dcc8d89ddb8b9fab84e2c99dd76

Files

c9f74dcc8d89ddb8b9fab84e2c99dd76
.exe windows:4 windows x86 arch:x86

c92746cd3b69c56e5c4ed6d3f9854fa1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
FreeLibrary
VirtualProtect
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA

user32

MessageBoxA
wsprintfA

Sections

.data
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 444B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ