c9914fb3f5f3d535f186e58f2f216e34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9914fb3f5f3d535f186e58f2f216e34
Size

200KB
MD5

c9914fb3f5f3d535f186e58f2f216e34
SHA1

24fdfc4e3e97c7687d8522ae5a1dfe8ec34ca223
SHA256

8b535cded08e960e5041b1dfe152b8c025706779c42e032513132583f7107b9a
SHA512

7f8a923336591e5458a9886d2bbed442d60aa6693b3fe6e33a20616b6c66c40437079a7db660c5bebd130f1ad9e15b76b393e99a6e6434610e5a6049d471cca7
SSDEEP

6144:UpKrmAh2+5sc1Ok+Y4aq4ceCZDCHnPqPqsF:hCCOk2ZTZDMiqu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9914fb3f5f3d535f186e58f2f216e34

Files

c9914fb3f5f3d535f186e58f2f216e34
.exe windows:4 windows x86 arch:x86

2647c58c422ddbfe43e3dfd99b44f8c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexA
LoadLibraryA
VirtualQuery
VirtualProtect
VirtualFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GlobalLock
IsBadWritePtr
VirtualAllocEx
Sleep
DeleteTimerQueue
GetLastError
LocalLock
VirtualLock
FindClose
ResetEvent
VirtualAlloc

user32

PostMessageA
FindWindowA
InSendMessage
SetTimer
ReleaseDC
UpdateWindow
LoadCursorA
GetDesktopWindow
GetDC
GetCursorPos

gdi32

CreatePatternBrush

msvfw32

ICClose
DrawDibOpen
DrawDibClose
DrawDibEnd
ICCompressorFree

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ