97da3c81d5a93c3d2fa6ee616090a5e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97da3c81d5a93c3d2fa6ee616090a5e3
Size

68KB
MD5

97da3c81d5a93c3d2fa6ee616090a5e3
SHA1

2dcfc1c4d6f26cc1433c6e88c3a2427fb7bdce19
SHA256

73e359e09f5e2c31cecbd6c2f15d06e48fa4206dedda6d57f2e036e20917dd3e
SHA512

c091eb7d155e5d40a67ec37a32a4563e7ad7bfab963234a9992d0d183b0de640c825ab6f075215ecd970784a06fd2bc29701d92e62d83f36b49d03b8c02fe4d9
SSDEEP

768:xIyqGp8lG/NvfaJPenSNHCOsGkJ+rJ0qEvdOqkr9xC+uJTJWUsDUW/NYW:xvPp8Q/1faJPeSNHCOtJWHkpshpJWya

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97da3c81d5a93c3d2fa6ee616090a5e3

Files

97da3c81d5a93c3d2fa6ee616090a5e3
.exe windows:4 windows x86 arch:x86

d276c711288ffce7674a60308f06ec6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
SetFilePointer
CreateFileA
TerminateProcess
ResumeThread
VirtualAllocEx
GetProcAddress
GetModuleHandleA
GetFileSize
GetTickCount
lstrcmpA
GetWindowsDirectoryA
ReadProcessMemory
GetCurrentProcess
GetModuleFileNameA
CreateThread
ExitProcess
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
WriteFile
GetStdHandle

advapi32

GetUserNameA

user32

wvsprintfA

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE