c9294a674951426e8e66b4c3e8b56ded | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9294a674951426e8e66b4c3e8b56ded
Size

178KB
MD5

c9294a674951426e8e66b4c3e8b56ded
SHA1

a3f5db9b25cc846c03d379662e1282dce4947930
SHA256

df59ebeffd5bfccc01dbd82a975e9c5f859596a3480c5f5008b83c74c014633c
SHA512

c9b555aae76f0fbed718181e03a0b449d2509edc217708e41c00c1778408dd994259e08f5d27cb1d9c8944a2175f74f08ef7d1fafe6d33ee3369e5c2483d2f7c
SSDEEP

1536:2fXltOsWXopPfja/O5vtbhMxLVyqxk9Srj5lfIB7W8npcqTGNPgKJI/:U1csg+ram5vttMxYChFlgNbOm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9294a674951426e8e66b4c3e8b56ded

Files

c9294a674951426e8e66b4c3e8b56ded
.exe windows:4 windows x86 arch:x86

e3a1a0b9ac75f566ca7fd52c153d8c25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateFileMappingA
DeleteFileA
ExitProcess
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
MapViewOfFile
ReadFile
CopyFileA
CreateFileA
Sleep
UnmapViewOfFile
WriteFile
_lclose
_lopen
_lread
lstrcatA
lstrcpynA
lstrlenA
CloseHandle
RtlZeroMemory
lstrcpyA

user32

KillTimer
LoadCursorA
MessageBoxA
SendMessageA
GetWindowTextA
EndDialog
GetDlgItem
DialogBoxParamA
ShowWindow
CreateDialogParamA
wsprintfA
SetTimer
SetFocus
SetWindowTextA

comctl32

InitCommonControls

winmm

PlaySoundA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ