c9599a59ec2d9e6f2c7a0eb190a52818 | Triage

Sharing

General

Target

c9599a59ec2d9e6f2c7a0eb190a52818
Size

56KB
MD5

c9599a59ec2d9e6f2c7a0eb190a52818
SHA1

055639cf33e08b9cc85be18ef57eb76c595c4543
SHA256

05bc03dc4f6a46c5250bec45fc83535d422fb3e270affde1db2936a04935042c
SHA512

eab008c9bf24c8f0d121838436231badb24fd1e6298fe9acacc0288f784a105aaabf8db5f00786e6b5866aa4d9d1f8d13a887a90670385468a9f21c66bb3299a
SSDEEP

768:lbYqFx1yy9VuWyEj0vaQxBrTvBFE33BiKBX4Bn7jKg:lbYziV9yEjyaQxx7wHBiKIn7+g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9599a59ec2d9e6f2c7a0eb190a52818

Files

c9599a59ec2d9e6f2c7a0eb190a52818
.exe windows:4 windows x86 arch:x86

bde0195bb7d98c1a7a65e76bc001f0f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
SetWindowTextA
DefWindowProcA
PostMessageA
CreateWindowExA
LoadStringA
LoadIconA
LoadCursorA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetCommandLineA
GetStartupInfoA
ExitProcess
HeapAlloc
GetFileAttributesExA
GetLastError
GetModuleHandleA
FileTimeToSystemTime
GetFullPathNameA
LoadLibraryA
SetEnvironmentVariableA
IsValidCodePage
GetProcessVersion
DeviceIoControl
GetProcessHeap
WriteProcessMemory
TlsGetValue
CreateDirectoryA
GetCurrentDirectoryW

comctl32

ord17

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ