f9754f4e5f66945ffc4b01e603d60b4aad93303c0942b3e6fda482fa2428dfc0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9754f4e5f66945ffc4b01e603d60b4aad93303c0942b3e6fda482fa2428dfc0
Size

56KB
MD5

b8b293032b180bd6bd4d848dd35ce51f
SHA1

4ef12eac2f4ba6a3f36c1db5613c7730083f2046
SHA256

f9754f4e5f66945ffc4b01e603d60b4aad93303c0942b3e6fda482fa2428dfc0
SHA512

0077903c9ecb0f824092fe9ed73bc47db50c52fde530f9399aed3b2d04f3b62a099953a180fd9de74b85025dd53227cdf5cd7094d3f4b09bd5978a7fb87a1385
SSDEEP

1536:kh2IYKvkuD0nyzB9e5owPp2bl6L+WLuhF:kh2IYKvSyV9Sp+6BGF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9754f4e5f66945ffc4b01e603d60b4aad93303c0942b3e6fda482fa2428dfc0

Files

f9754f4e5f66945ffc4b01e603d60b4aad93303c0942b3e6fda482fa2428dfc0
.exe windows:4 windows x86 arch:x86

116e02e173f79e7a5839645bb5267e46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
WriteConsoleOutputW
FindFirstStreamW
PowerSetRequest
EnumUILanguagesW
GetTimeZoneInformationForYear
TrySubmitThreadpoolCallback
GetProcessAffinityMask
FoldStringA
SetNamedPipeHandleState

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE