099f0173ce982391c863337ccd9bbac0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

099f0173ce982391c863337ccd9bbac0
Size

14KB
MD5

099f0173ce982391c863337ccd9bbac0
SHA1

2b94747792f4a0d4e2fac86ffcc7b7593c03ea50
SHA256

56a07d8989e1022c0483c4a2cf7e292cc569a227583f04eeaf3670bbe34307b6
SHA512

93c97d82f53a2bdf85b955808890e47785f237e173f26f6ff23938d7cd404ac162a8f35b9aae20c2b531589d6fc10a4468c4f5706506aa7aa811b17de207f7fc
SSDEEP

384:Kmzd/UkYGOeEPmVnDaQ+3fAIjN6jliOnz+KcKJo:KmznWLmVnDS3Yrz+jV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
099f0173ce982391c863337ccd9bbac0

Files

099f0173ce982391c863337ccd9bbac0
.exe windows:4 windows x86 arch:x86

ac87c749de041d050a4ac16a115a8cff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
GlobalAlloc
ReadFile
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ