9c0c9ecd778789e594d50a44c728c34dca04ac4d4f9ad9572179be28d682fc82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c0c9ecd778789e594d50a44c728c34dca04ac4d4f9ad9572179be28d682fc82
Size

71KB
MD5

1943ffee37e622ca03cb7354d1488816
SHA1

68458046e4a86de1c675186b28be82af1a3bb394
SHA256

9c0c9ecd778789e594d50a44c728c34dca04ac4d4f9ad9572179be28d682fc82
SHA512

53fd4a088c4b82be54aa78ef64f0462af74dcdd2d59e110b0aa5b17a9341533ee2dd93e98ba48f03ee15255756a3b56c0423f21f43ce50680a39812bbcb9d242
SSDEEP

1536:19vbKy8RoG6nXAHb0b4zyLIU1JheKK6FDiMwe8dBk:rbKy8RjQb4on1jeKK6FDiMwe8dBk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c0c9ecd778789e594d50a44c728c34dca04ac4d4f9ad9572179be28d682fc82

Files

9c0c9ecd778789e594d50a44c728c34dca04ac4d4f9ad9572179be28d682fc82
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE