c9a56799f815a9def44cfde4bd25acb43e79e0bb8d2839044ef56a90e53ef1a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9a56799f815a9def44cfde4bd25acb43e79e0bb8d2839044ef56a90e53ef1a6
Size

5.5MB
MD5

e240c97f9e8ef512af1a4847e1e4a1d2
SHA1

70272ce4185475e2e2bae17e363b9b1a2d79e525
SHA256

c9a56799f815a9def44cfde4bd25acb43e79e0bb8d2839044ef56a90e53ef1a6
SHA512

ebc74794fd5867dec511287bb9ecb6f645958033ad9873f2209d7453b69d759d1ee16d291e36b510205c6d5f4e7322a40eda0ef06e2d124079a5d029650adf4c
SSDEEP

98304:/Fg8LhadmOjwW3NV5OuNoINfr1uueMTQ1pyajDT/tM5sZW8ur9R7kQ4Xq:68QjwW3NKy1r1HdMZHDtM5WzurXg5a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9a56799f815a9def44cfde4bd25acb43e79e0bb8d2839044ef56a90e53ef1a6

Files

c9a56799f815a9def44cfde4bd25acb43e79e0bb8d2839044ef56a90e53ef1a6
.exe windows:5 windows x86 arch:x86

f1c4f615f7e7d331b06d52874710315e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_ismbblead

kernel32

UnhandledExceptionFilter
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

RegisterClassExW
CharUpperBuffW

gdi32

TextOutW

Sections

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wh;
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.):c
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.O8U
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

./sE
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ