c9efd886bf508361694013efb19002b1 | Triage

Sharing

General

Target

c9efd886bf508361694013efb19002b1
Size

76KB
MD5

c9efd886bf508361694013efb19002b1
SHA1

887375e4befa699f71e13f5ab41a22452e6418ca
SHA256

8fc8233b0dd3096ea69d34815ac176d03b63400e3ca37068beea3945be6b77dc
SHA512

ff5cf5021534f1bd8f869ce8964966dc25328dcf8923f119c63d5f0455a7b8b27f8ad4545eb82aad570f91c26af78f814bc0ef656e07a2df50178659a8f4b9e1
SSDEEP

1536:48Ecbtv21qfjDJS9+DlBpyY+LiE/K1zpjVrs2ryrd1vUQuq6:4pcVlhSWl/yxadHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9efd886bf508361694013efb19002b1

Files

c9efd886bf508361694013efb19002b1
.exe windows:4 windows x86 arch:x86

532d3f2d0ac1df1b01207bdd62e0a31c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateJobSet
EnumDateFormatsW
OpenSemaphoreW
WriteProfileStringW
GetLongPathNameW
SetConsoleWindowInfo
FindFirstChangeNotificationA
GetNumaProcessorNode
LoadLibraryExA
DebugBreakProcess
GlobalUnlock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE