96896fa2097884c53785a1f9ee6870e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96896fa2097884c53785a1f9ee6870e9
Size

420KB
MD5

96896fa2097884c53785a1f9ee6870e9
SHA1

46f9b318fd7243968048dbd9da65e9af8d1603e7
SHA256

8a0b8e860b534bd0ba77e412af11435f98e6385403bb25ca31fdd9cfcfb5b937
SHA512

1b240e1e9cff84dcb29820bd8fb12e08044dd3f4b2907d7bcc33a5d303e6c2e21b08e0391e20d75bfa2b72dd3254ca6d546303c18788d470d732a31e1e44f1d1
SSDEEP

3072:jwrkjDQc8W3F8rKZWqD96MvB8y4zWcHnvud9dpL9vTwjJ9Lb5:AkjDQO3F8rKZHJ60sHv0/pxU9n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96896fa2097884c53785a1f9ee6870e9

Files

96896fa2097884c53785a1f9ee6870e9
.exe windows:5 windows x86 arch:x86

b6bebedf54a56d19d754b1facf450f0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
VirtualAlloc
GetProcAddress
LoadLibraryA
GetLastError
WaitForSingleObject
CreateThread
ExitThread
GetExitCodeThread
GetSystemTime
SetFilePointer
SetStdHandle
GlobalAlloc
RtlUnwind
HeapDestroy
DeviceIoControl
CreateFileA
CloseHandle
WideCharToMultiByte
GlobalReAlloc
GlobalFree
GetModuleHandleA
WriteFile
HeapCreate
FlushFileBuffers
VirtualProtect
Sleep
GetTickCount

user32

MessageBoxA

cfgmgr32

CM_Get_Parent
CM_Locate_DevNodeA

Sections

.text
Size: 389KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ