f9d69c7a637b50ed5114252ef1f7cc04ef31a318e00d8cb17e33a36009a2898b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9d69c7a637b50ed5114252ef1f7cc04ef31a318e00d8cb17e33a36009a2898b
Size

5.7MB
MD5

0ff32632f7bea199e04666ea047196a4
SHA1

1e839ccc10cc6ad74b7cf9078c8f7a25b7faa66a
SHA256

f9d69c7a637b50ed5114252ef1f7cc04ef31a318e00d8cb17e33a36009a2898b
SHA512

5cf7113340e88aae8f7a0a0780c36c9cc8d086f80622a05a73a5146e140638683ba1acf6b00279ba58a0929879e8cbeac8ab021d550e1b8f46fdaec551f06dde
SSDEEP

98304:G+HVb4W8Q7r49unsSNOAZW1fDZNeIzGLvIuuQ/dPKF/MxIlX+GjVbY0l4eKEDR:G+HJ8049OsIXW1rZtzGEuu8i/bB+2VbL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9d69c7a637b50ed5114252ef1f7cc04ef31a318e00d8cb17e33a36009a2898b

Files

f9d69c7a637b50ed5114252ef1f7cc04ef31a318e00d8cb17e33a36009a2898b
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB

Sections

.text
Size: 690KB - Virtual size: 689KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

flag_dat
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 580KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ