97bf15431229a7309f989ba29f05ac9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97bf15431229a7309f989ba29f05ac9f
Size

68KB
MD5

97bf15431229a7309f989ba29f05ac9f
SHA1

cfbaa9e391af06c7459500030adc092c8cbcacc5
SHA256

d145233e24b3d8483193c4de30d982b08f909d4f46910ca5fe9100c61c78ea1b
SHA512

82e9c87ccf082692c739ac0ba311e10ed624760539021d3522742fa0074641114ee3a93a1ed3048df09c957b7e108de5f2a094ecd06325b19f35063951efde43
SSDEEP

768:4fSn2/XvN2a5U8dez7P7yST+Rbcj+tY7ak4L39aQbmACwZOMV6JKP6avVGt7uu:4fg2/Ltez7P7zaRYhaL39aZAJvKt7b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97bf15431229a7309f989ba29f05ac9f

Files

97bf15431229a7309f989ba29f05ac9f
.exe windows:4 windows x86 arch:x86

482a2c85f161f2f395e0cc2c17ff7235

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryW
FreeLibrary
LoadLibraryA
GetLastError
HeapFree
SetLastError
GetVersionExA
lstrcatA
lstrlenA
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsSetValue
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
LeaveCriticalSection
EnterCriticalSection
Sleep
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSection

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ