2099f85fcc20cc16cb50aff687e98850 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2099f85fcc20cc16cb50aff687e98850
Size

51KB
MD5

2099f85fcc20cc16cb50aff687e98850
SHA1

804f1f5c089ddb4de6085a428e4be0dd4f9c441d
SHA256

e2b4db1c297c46789a5881482d54abf444fca65b1d1f808242c6bbf859a64e8b
SHA512

c21167c5e9dc414fc9758b549d7c82078f9f73f6583791847d11124e4ccce21039a7940deb113dbc15cc6a30958e2f99cb6ab863f0b8fbc7976f2cf6e2650d53
SSDEEP

1536:x10Bz6kd2uQPs9mhk05r0FLQ34bgKd+1:YBz4f0mae0FVNq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2099f85fcc20cc16cb50aff687e98850

Files

2099f85fcc20cc16cb50aff687e98850
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE