c9646cc83c6c9b692ff87cfae723ac2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9646cc83c6c9b692ff87cfae723ac2d
Size

203KB
MD5

c9646cc83c6c9b692ff87cfae723ac2d
SHA1

b0957bafbfe5560d0b2ffd5d51fdc6afbadd5a5d
SHA256

6cf2ef69742c21efe23b80d4eee127ea5c304627db57594780590774d3c4ef07
SHA512

a09a75b87aa79cad803451a80c12a6ca853fa65f8189db333408d70b11d9c3ad32b25a2032d354e1ef209652c72c2cda1bf535863799e49b8187f61bff1340a2
SSDEEP

3072:F0Z7bWNwRe4hPGCS71Hv8m/sz8E67fO4h1vh3t8:a7bWgIb71km/sEBhJj8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9646cc83c6c9b692ff87cfae723ac2d

Files

c9646cc83c6c9b692ff87cfae723ac2d
.exe windows:6 windows x86 arch:x86

9ef39e4cc5608d2d2c53a7baa5c1c900

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

smallexe.pdb

Imports

msvcrt

exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
RtlUnwind
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 194KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE