098b4e4d0baadb9ece890679f5ad7606 | Triage

Sharing

General

Target

098b4e4d0baadb9ece890679f5ad7606
Size

1.1MB
MD5

098b4e4d0baadb9ece890679f5ad7606
SHA1

cc1c256162ad0f5c4ead23c9584100252db14712
SHA256

36b65f55cf00d2bfd35e65ac4321e9b97f3e1538f77ae7a9b3a53c3c38cd43cd
SHA512

dc69f1af2c631de760da388bc1eb707fd822bbbb088122e9362ed2ddeda706a365a03abbfafa25e22a2958e85b6ffd27af55e8b5d201c0464b5754dc03ca0292
SSDEEP

24576:hR857AaW/2O6WbldghTSva3dl0M4VIsAvkGrLTGvCBHX5Ln:hR8klQLtl0Md8SGvCB357

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
098b4e4d0baadb9ece890679f5ad7606

Files

098b4e4d0baadb9ece890679f5ad7606
.exe windows:1 windows x86 arch:x86

ff282bc7625aef57199410cc6ebfd6f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

mpr

WNetGetUniversalNameA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

netapi32

Netbios

Sections

CODE
Size: 195KB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE