96e554c44e6e02bbc5ab31293586bf51 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96e554c44e6e02bbc5ab31293586bf51
Size

36KB
MD5

96e554c44e6e02bbc5ab31293586bf51
SHA1

b3e81f14441a2829646a943b563389603f56fbdf
SHA256

8e428fa7247aaec91bffdf2dfcb0c49323eb5fc0b929177eaa4ee4d01872d190
SHA512

8e123572e62a05ddfe83b9fc44978d781ba051174b57840a4024192508520b03af55ad233fdfba6bcf414ab683f6e1c1de094ac9a6910dcbc55c53337bd4053e
SSDEEP

768:XKXDBUFgdb87iUIZFUR23OFz/MLhdTLl3kyqWm9eQKpU7bT924xl5LZWJQKNs:aXDBTg7iUIZFUR2+Fz/MLlFOwU7A4xE4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96e554c44e6e02bbc5ab31293586bf51

Files

96e554c44e6e02bbc5ab31293586bf51
.exe windows:4 windows x86 arch:x86

04e728a17894e933d98465dde50bbbd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
Sleep
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
QueryPerformanceCounter
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE