96d975a853b744cae1093644ea71dbc7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96d975a853b744cae1093644ea71dbc7
Size

145KB
MD5

96d975a853b744cae1093644ea71dbc7
SHA1

7e000d8932563138dfa80489bcbdf2e3a658e11e
SHA256

51b8581dabdf2cfd9d3016bca88b97594d93a424734998d16665ee91bb1f1793
SHA512

08e2d4ee7737f8496a530e770358a9985bf780bca061e59c41598e81975bc1022d33f7548b6bf82b02b8cb84e20f78de16b68e6fdf533911aaacee8d9cf5cb5c
SSDEEP

3072:MMsP6tu+8PHvLHQnFda7MuiatqsekCpw5vVE2tQeR2:M1S5erOdahiq1sw5vVEA2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96d975a853b744cae1093644ea71dbc7

Files

96d975a853b744cae1093644ea71dbc7
.exe windows:4 windows x86 arch:x86

2beb791b1f1cc7b05a7ab4dc020ef882

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
SetCurrentDirectoryW
WriteConsoleOutputA
OpenWaitableTimerA

user32

DefFrameProcA
GetWindowTextLengthA

gdi32

GetCharWidth32A
CopyMetaFileW
GetObjectA
LineDDA

Sections

.fasm
Size: - Virtual size: 225KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 399B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ