9f83b5ca498b31f48e94d9568069f52dd979e2fcfcfe8b4e3d2441b4c94caf6f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f83b5ca498b31f48e94d9568069f52dd979e2fcfcfe8b4e3d2441b4c94caf6f
Size

63KB
MD5

b583117f79ba2bd5c18b18a901c191bc
SHA1

5c75264b4bd759b2388722c6463203332190a90b
SHA256

9f83b5ca498b31f48e94d9568069f52dd979e2fcfcfe8b4e3d2441b4c94caf6f
SHA512

9dffb31007e884daa5dd5da6c28bcb449fc0460047ef1529ff586280501d13099640dc34bef5579c69fcaeb222c6b7d21f3e84857e0708930845c96b4801154b
SSDEEP

1536:fqgoWT9aAGFuWRZ3yRte0K2dyYaqwfoabLNIfQl52yrnR:C+aFuaVyRimynqqbBTnR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f83b5ca498b31f48e94d9568069f52dd979e2fcfcfe8b4e3d2441b4c94caf6f

Files

9f83b5ca498b31f48e94d9568069f52dd979e2fcfcfe8b4e3d2441b4c94caf6f
.exe windows:4 windows x86 arch:x86

a1a508ce49d3add85498144eff63292e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlZeroMemory
SetThreadGroupAffinity
GetPhysicallyInstalledSystemMemory
PrefetchVirtualMemory
SetThreadIdealProcessorEx
ReadConsoleInputA
RegEnumKeyExW
LockFileEx
SearchPathA
K32EnumPageFilesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE