96d9e3a844efe14b3a077b49fefc98f7 | Triage

Sharing

General

Target

96d9e3a844efe14b3a077b49fefc98f7
Size

84KB
MD5

96d9e3a844efe14b3a077b49fefc98f7
SHA1

019c6f7bd0247410a980484628c301eeba1af676
SHA256

11a878e694813e9d7db8a13b17363a1d88cd79039863e5bb8ae89a57671ea4ba
SHA512

194e63fd3b3eff14783b793580312caac2665059f2a24973ec30ad7caf260e2a9bb229fadac36b3165abe364454eff24079e0cbeed6db8f9e0b6fab97f2a12c0
SSDEEP

1536:peTFeO0R7TAX1WpMW93IzVlTxvBGXz5yfa08lk2fTT0ERJi1TF:p4FeOBX14MWVIzDTxJGkS0wfTT0Ki1TF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96d9e3a844efe14b3a077b49fefc98f7

Files

96d9e3a844efe14b3a077b49fefc98f7
.exe windows:4 windows x86 arch:x86

62f7f812099a64381b4c052bf70f73ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

RegEnumKeyA
RegEnumValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyW
RegOpenKeyW
RegQueryValueW

user32

CopyIcon
DrawTextW
GetWindowTextLengthA
GetDC
GetCursor
EndDialog

gdi32

DeleteDC
ExtTextOutA
CreateSolidBrush
SetTextColor
GetBrushOrgEx
GetPixel
ExcludeClipRect

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 91KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 661B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 199B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ