9cbb13277ac557a6cc5aa319ef3b9f209d8f72231ab3f051add26b0b97116e52 | Triage

Sharing

General

Target

9cbb13277ac557a6cc5aa319ef3b9f209d8f72231ab3f051add26b0b97116e52
Size

5.2MB
MD5

ffaa7b4c3d530cbd0c0785f9b8f6a31b
SHA1

6c62e336c707514c29dd83ef93a5bee64dff0499
SHA256

9cbb13277ac557a6cc5aa319ef3b9f209d8f72231ab3f051add26b0b97116e52
SHA512

544cfc621491058584d798f0cfb23c9336f77faec71c2a86abdd06a5d3c26a92a9f4293733c739eb428d865b9c9c974582024c00bc9c08f10f64e3c8116f0bdc
SSDEEP

98304:mwI7Wl5Yei1ov349un6JRlKBPE/JHlTaxa5iVFqZChp4TNPjbpJ:mwrl5kO349OKKBMfaxaYfq64tnX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9cbb13277ac557a6cc5aa319ef3b9f209d8f72231ab3f051add26b0b97116e52

Files

9cbb13277ac557a6cc5aa319ef3b9f209d8f72231ab3f051add26b0b97116e52
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB

Sections

.text
Size: 747KB - Virtual size: 746KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

flag_dat
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 494KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ