c9f9ed8e6fc71124a63d6802820e87ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9f9ed8e6fc71124a63d6802820e87ce
Size

4KB
MD5

c9f9ed8e6fc71124a63d6802820e87ce
SHA1

46cfb5f2bd8d9fe0d03d3931c80f2e238dee1522
SHA256

7c63ee22a90e6e81ad84481e0a0fe681af3fab5bc2c5eb9cb83012c207c77444
SHA512

fdbc7c8a9cf5ac624a3c1919d19b3789a0dd44e1f5dd0f578c26da9ff7403a2a2382f98054f512f7e0e196186490f857add3b6105246679b6fff2515b64e0352
SSDEEP

48:SDqBm5rhrhUWwEJ/Tnls5HyacKZyB9J4WTd8A0Pu2VR:Ousr9zkHJiLJrc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9f9ed8e6fc71124a63d6802820e87ce

Files

c9f9ed8e6fc71124a63d6802820e87ce
.exe windows:4 windows x86 arch:x86

478562474b51c74d0d8a15dcc19d07c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
GetCommandLineA
GetFileSize
GetProcAddress
GetSystemTime
LoadLibraryA
MapViewOfFile
UnmapViewOfFile
lstrcpynA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ