99127360b9e6a34abad05c77d9c70510_exe32[.]exe | Triage

Sharing

General

Target

99127360b9e6a34abad05c77d9c70510_exe32.exe
Size

248KB
MD5

99127360b9e6a34abad05c77d9c70510
SHA1

685466b5f8de928a82cf1a4e96e0373da3226d16
SHA256

cd78202bba6f9a41ee06693cece1d7202642572c77af2fb631afc689de90042c
SHA512

c22bafa97134990a16a49323117321fee3c1167710f9951274930823c4f365eeda2ccf6f57986748663785a6d5f2d31ad2929788b98b9e1a0cd9168dfdafffdd
SSDEEP

3072:hzjAuUfkkPk4wigPI9Bxqfs37ab9+Chj8eUu5J98WCNYMK6RsjFys4g6e:RVU0PI9Bxas37axX3Uu5BwXRsA46e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99127360b9e6a34abad05c77d9c70510_exe32.exe

Files

99127360b9e6a34abad05c77d9c70510_exe32.exe
.exe windows:4 windows x86

fc3aeb3f3d7e5562ee7e174a661e9a62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetACP
VirtualAlloc
GetCurrentThread
GetOEMCP

user32

LoadCursorW
LoadCursorA

msvcrt

__getmainargs
__setusermatherr
__p__commode
_acmdln
__set_app_type
_controlfp
_except_handler3
exit
_XcptFilter
_cexit
_exit
__p__fmode
_c_exit

advapi32

RegOpenKeyA
RegQueryValueExA

Sections

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata51
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ggg22
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata52
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ