98404144906d0fafba529c3d15cbe9bb

General

Target

98404144906d0fafba529c3d15cbe9bb
Size

139KB
MD5

98404144906d0fafba529c3d15cbe9bb
SHA1

03a218c2307c6ace5915c30fdd321c38aca6ffb7
SHA256

60e428378c71184668bcfe7319c8b050bb7feac9946b29ad44651d0a0bdb5442
SHA512

6ad02174afe6bde86b4b84b6c7665bf36cbe45249d548571cdbfffaa207cd8992bb40a61e28e80fb2fd1db5af22dcdb4cfd50382414afc4d7892e9badbc7729f
SSDEEP

3072:Vpsj+0aTzY/JobzoMUtLyV1sf+hoHljM+:noWzYhovorE8FjM+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98404144906d0fafba529c3d15cbe9bb

Files

98404144906d0fafba529c3d15cbe9bb
.exe windows:4 windows x86 arch:x86

9a7ef5810b6b3e59461e4a2994880aa7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
VirtualFree
GetCurrentThreadId
GetModuleHandleA
VirtualAlloc
GetCurrentThread
GetProcAddress
VirtualProtect
GetSystemTime
ReleaseSemaphore
GetLastError
GetSystemInfo
GetLocaleInfoA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
VirtualQuery

user32

LoadCursorA
GetClientRect
GetTopWindow
IsWindowVisible
FindWindowA

shell32

DuplicateIcon

psapi

GetModuleBaseNameA

lz32

LZOpenFileA

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 404KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 40KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a7ef5810b6b3e59461e4a2994880aa7

Headers

File Characteristics

Imports

kernel32

user32

shell32

psapi

lz32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 404KB - Virtual size: 405KB

.tls Size: 40KB - Virtual size: 325KB

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 404KB - Virtual size: 405KB

.tls
Size: 40KB - Virtual size: 325KB

.rsrc
Size: 20KB - Virtual size: 16KB