99acf3999e6b84b7138b918e003481e3f5cf7a4c2eb7860dce3ae5b3799f49d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99acf3999e6b84b7138b918e003481e3f5cf7a4c2eb7860dce3ae5b3799f49d3
Size

152KB
MD5

972895262d23b5a65d1a7e0e4dbc47e8
SHA1

830be4bf581ec30662d20b4b9690bfeaab2ad58c
SHA256

99acf3999e6b84b7138b918e003481e3f5cf7a4c2eb7860dce3ae5b3799f49d3
SHA512

13fa257af0150c10e375f21846cf95657e6f550bccc67ea592cd55f173d36b52ca6f2f58ff328c596b2f0f43d0784f3c311168befceb3aef6f627fe9944a335c
SSDEEP

3072:bOnoSauVPLrJbsEJSnSSS8LdqfT24jzo8qLhPVM7r+:AvIg6bSSKf9qtA

Score

N/A

Malware Config

Signatures

Files

99acf3999e6b84b7138b918e003481e3f5cf7a4c2eb7860dce3ae5b3799f49d3
.exe windows x86

135e4f4a3583083e0b5424951010b169

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CloseHandle
GetTempPathA
GetProcAddress
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetStringTypeW

shlwapi

PathFindFileNameA
PathIsSameRootA
PathCombineA
PathAddBackslashA
PathFileExistsA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ