98048a04ee0eaeb838f3bde76ca96d25 | Triage

Sharing

General

Target

98048a04ee0eaeb838f3bde76ca96d25
Size

9.0MB
MD5

98048a04ee0eaeb838f3bde76ca96d25
SHA1

736e34e1a07331ea5b066137a49e9a0281cba7e3
SHA256

76c4f52502c4e18e30c082b40596c72218136174da8c6e9ac9bb67d7d0eeac83
SHA512

97b23f9b67fdbd5ccdbac570eca20a3a19ea036f9ed10cb7d73ac4a6b7f3557410f70a0077daf62539d02d03bf9c7cc425188c00449584cb057a789f10a10051
SSDEEP

196608:2ffJzG1Goi50OtgGFfXLOA+JJqF3exgSTBqAJKpkpTCIsFEMAvXy:ohaoOOtgGFSJJqwqEEzpkNCIYi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98048a04ee0eaeb838f3bde76ca96d25

Files

98048a04ee0eaeb838f3bde76ca96d25
.exe windows:4 windows x86 arch:x86

cfcc4091c0d9b2f622ef0bdd9ec16bbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
SizeofResource
LoadResource
LockResource
GetTempPathA
FindFirstFileA
DeleteFileA
CreateFileA
WriteFile
FreeLibrary
CloseHandle
GetStartupInfoA
GetModuleHandleA
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
VirtualAlloc
VirtualQuery

user32

MessageBoxW

shell32

ShellExecuteA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9.0MB - Virtual size: 9.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ