9fdfcc9db9a9a9192c1089cf2ff717e0121d34e65d58dfd5fbed30dcd29dd7c5N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fdfcc9db9a9a9192c1089cf2ff717e0121d34e65d58dfd5fbed30dcd29dd7c5N
Size

65KB
MD5

fc5fbcd5c9f634bbb4350e932cfbefd0
SHA1

366c3c2b4b478612402cbc8cf2f7e0e622c35efe
SHA256

9fdfcc9db9a9a9192c1089cf2ff717e0121d34e65d58dfd5fbed30dcd29dd7c5
SHA512

3037569b8e822363081f5b621a8f6a753c16ddc944b9ab515790c8bc193ce92a0a23a5b56e0f3015007f8751a1bc293fcd789c04a8aa5425cf189bc556df5a72
SSDEEP

1536:wXYeYD3/FpOa1UOHkkzxmJkJPTw+oGfteSO/Es:RFpl1NwOLlteL/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fdfcc9db9a9a9192c1089cf2ff717e0121d34e65d58dfd5fbed30dcd29dd7c5N

Files

9fdfcc9db9a9a9192c1089cf2ff717e0121d34e65d58dfd5fbed30dcd29dd7c5N
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ecode
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ