9c3d5b67fcf25d63a13955f4a0f774cfa72b1ca4fd31129a92ff91e86c285092 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9c3d5b67fcf25d63a13955f4a0f774cfa72b1ca4fd31129a92ff91e86c285092
Size

492KB
MD5

312aec813bed757dca96e79eb5ae6f2c
SHA1

9d69443dd1af2dbbd4c8e37e4506e17ee67c8d9d
SHA256

9c3d5b67fcf25d63a13955f4a0f774cfa72b1ca4fd31129a92ff91e86c285092
SHA512

aa12db76b8b8c9ff68a16cdbd4ead53a8d49cd9b58acf4d739f8eebc4d2a63d773b4f37d625ca0b58ad916c04639a687037f084a14881976ddf1c9b70a604b94
SSDEEP

12288:NyAfDcgcTQhgpZBDtoRAG01LqTl2mZoisp:vDVBADt1ZKlX6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c3d5b67fcf25d63a13955f4a0f774cfa72b1ca4fd31129a92ff91e86c285092

Files

9c3d5b67fcf25d63a13955f4a0f774cfa72b1ca4fd31129a92ff91e86c285092
.exe windows:4 windows x86 arch:x86

06ea752c2bfc857d5f84f3229253c7b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
SetFilePointer
ReadFile
CreateFileA
CreateProcessA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
DeleteFileA
Sleep
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
LCMapStringW
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
WriteFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
CloseHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SetStdHandle
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile

user32

LoadStringA
FindWindowA
MessageBeep
MessageBoxA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ