c9286fd0cb1b554de75f83be7d1e1830 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9286fd0cb1b554de75f83be7d1e1830
Size

16KB
MD5

c9286fd0cb1b554de75f83be7d1e1830
SHA1

8e44597c19efc6a03cb5f8bc707d60502dec4607
SHA256

16064e1d795b17d6c3110ba0e706a9a9d3a8ff4dce16a0b498b497360eecddef
SHA512

0e202b7e882221bc7a0d8e85a80fc2891d1387d1ca4c07b39f6a8a2859d32725cd5b2a94ffe104ee515223b6cf939f37b392b170e00ec40501d9b4c66cee7871
SSDEEP

96:rrLp3mXdGLAiFqxyhAshxihDHPtboynu+:Tp3mXdGLAiYxVsXQP1oynu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9286fd0cb1b554de75f83be7d1e1830

Files

c9286fd0cb1b554de75f83be7d1e1830
.exe windows:4 windows x86 arch:x86

af1859ec6cc03cbe4e542d842739f745

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
ShellExecuteA

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__getmainargs
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
strstr
strrchr
memset
strchr
strcat
strcpy
fopen
fprintf
fclose
__p__fmode

kernel32

GetStartupInfoA
GetModuleHandleA
CreateProcessA
CreateFileA
CloseHandle
GetFileTime
SetFileTime
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
FindFirstFileA
CopyFileA
FindNextFileA
FindClose
GetModuleFileNameA
SetCurrentDirectoryA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE