dc9426f08d8c1517908be8cb61fbbd863fc517a4b2da6d0aca8446c7723e0726 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc9426f08d8c1517908be8cb61fbbd863fc517a4b2da6d0aca8446c7723e0726
Size

323KB
MD5

d3927432f997251eea57ff254bb5ec92
SHA1

c6b69b201e5789d4dd1eb57c42d6e1bfcaab07f8
SHA256

dc9426f08d8c1517908be8cb61fbbd863fc517a4b2da6d0aca8446c7723e0726
SHA512

f19f50db412bb160f13acf5fee142d9bdeb455574b52c73cd6e3ac46e93fcb42b092655471cc6d4a704126f0b887b7caea392affcf69b60ebe1870ab63a28938
SSDEEP

6144:Zt58sOQf6lghcnBBLf9tQiepbGjhboOBnSusSTUvXBirw/AwFFnV:ZtisOQf6lXbpt/kbGjhV5AvXxHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc9426f08d8c1517908be8cb61fbbd863fc517a4b2da6d0aca8446c7723e0726

Files

dc9426f08d8c1517908be8cb61fbbd863fc517a4b2da6d0aca8446c7723e0726
.exe windows:5 windows x86 arch:x86

06ef33a1c45fdabdfa5b6e2e08bce5aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadCursorW

advapi32

RegQueryValueExW

shell32

ShellExecuteA

ws2_32

htonl

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 289KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE