c9668e2c2c35867d1bea4aee5b77fa9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9668e2c2c35867d1bea4aee5b77fa9b
Size

41KB
MD5

c9668e2c2c35867d1bea4aee5b77fa9b
SHA1

64163f17b98ba75ef23cb065f491c9c548e34cde
SHA256

7bfeee0625aea0c4a4e638551e28c34e530c0302243b6c5e8179061624e0378b
SHA512

5f9b3084bcb8188273c7bff85fc66e666bbb1a75ad3792f604da412d1bc966009bff68a9b78a06ae378b515ef27c8a33e25e1ca9078c13d4729410afc319eada
SSDEEP

768:4Q4rZAwvgYbM59LZJLTGT0u1NFqagmjaxC92BwpHgsi7hOiibEGQ+h3YEcDN7/+u:4Q4rZAwvgYbM59LZJLTGT0u1NFqa5jan

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9668e2c2c35867d1bea4aee5b77fa9b

Files

c9668e2c2c35867d1bea4aee5b77fa9b
.exe windows:4 windows x86 arch:x86

f224bb1377b10701bf0e592c27a9e9e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
Sleep
GetModuleFileNameA
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetModuleHandleA
GetStartupInfoA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
realloc
free
_strdup

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1002B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE