96ffb39abfe11fdbde0eeea9e956b6c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96ffb39abfe11fdbde0eeea9e956b6c0
Size

114KB
MD5

96ffb39abfe11fdbde0eeea9e956b6c0
SHA1

f5b43562b8667d094dc94bf6673ca5b8c9b4cd88
SHA256

5c95b0feef7483a24cf3dadcb5c0cfd3bfc4343f61c107ffc34cf139d58c63e2
SHA512

4206daa6d4d447f27379a17829fcfbdaec11ad911b8b96fd12ba1ca0cf83e4b52d30daf3c24f3f36f1e66e92b2f56e65c2579b1ac24e929ce68440e830b10faf
SSDEEP

3072:4qMjVRPbnhKM1D5yUXrMJtDfd/0Vg0Ul:rGDnhKQEzDfmr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96ffb39abfe11fdbde0eeea9e956b6c0

Files

96ffb39abfe11fdbde0eeea9e956b6c0
.exe windows:5 windows x86 arch:x86

2af73622d601441a01d7600890b06b13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessIoCounters
GetCurrentProcess
GetTickCount
GetCommandLineW
IsDebuggerPresent
GetStdHandle
GetProcessVersion
GetCommandLineA
GetProcessPriorityBoost
GetModuleHandleW
GetProcAddress
GetModuleHandleA
GetStartupInfoW

user32

IsWindow
GetParent
IsIconic
AnimateWindow
IsChild
CloseWindow
OpenIcon

shlwapi

PathGetArgsW

msi

ord194

msvcrt

_wcmdln
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
_initterm
__p__commode
_adjust_fdiv
_exit
_XcptFilter
exit
__wgetmainargs
__setusermatherr

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ