9cec96540ae6f03f642e2ba66d424a9c | Triage

Sharing

General

Target

9cec96540ae6f03f642e2ba66d424a9c
Size

337KB
MD5

9cec96540ae6f03f642e2ba66d424a9c
SHA1

193610a04744660be62c47e49774c0d68128107b
SHA256

c972d3aece28575f295f7e049930248382719afd29ce1ac70db2e2b737a4bfe0
SHA512

073389a3a47388bf09723d85e2c77f7c808c2c6bc41a2fd0af95d4015ccf6b37dd13cfb361aeb25e6ebd53950661f1886289702929f9095521543b4284c6e80d
SSDEEP

6144:30TpeceRF7aI+s1QL/UY7BKOmBYEz/F3r7Dxq73G/GZi:ETpTev7JALL6VDCW/GZi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9cec96540ae6f03f642e2ba66d424a9c

Files

9cec96540ae6f03f642e2ba66d424a9c
.exe windows:1 windows x86 arch:x86

175d131b0836fd4e95ea7b7a4a7f44d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
GetLastError
GetModuleHandleA
GetProcAddress
CloseHandle
GetTempPathA
GetTickCount
RtlUnwind
GetSystemTimeAsFileTime
LoadLibraryW
FreeLibrary
LocalFree
LocalAlloc
SetLastError
GetModuleHandleW
lstrcpyW
lstrcmpW
lstrcatW
lstrcmpiW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess

crtdll

__GetMainArgs
exit
raise
signal

netapi32

DsGetDcNameW
NetApiBufferFree

advapi32

RegOpenKeyExW
RegCloseKey

user32

wsprintfW

framedyn

??0CHString@@QAE@XZ

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 127KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 322B - Virtual size: 322B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc1
Size: 486B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE