98779c52089db1251be446854038c68b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98779c52089db1251be446854038c68b
Size

88KB
MD5

98779c52089db1251be446854038c68b
SHA1

4a02f4f755e374d9ce3f9b84da20714cfbe70002
SHA256

73ebf722a85bd62f0d7d74b23152eda80e667322df48f4ff21adc2a0a14d38c0
SHA512

fe61c09a90d5fe9c5d5b68432feff19575cc39bb86506861837858e40b423f5495334012271c145da95e8de6ea77e18f5230ed677890543cc7716c39aadb4081
SSDEEP

384:9+GvdiJAUMRjelacva8xxBK93hygZv9AGZGgZv9AGfGgZv9AGAWb:9fvdW1lacva8hK93hygdZGgdfGgd3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98779c52089db1251be446854038c68b

Files

98779c52089db1251be446854038c68b
.dll windows:4 windows x86 arch:x86

e6dc8ba12d4674b3d67a2361099563d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
GetDateFormatA
GetTimeFormatA
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
GetLastError
CreateMutexA
Sleep
GetEnvironmentVariableA
lstrcat
lstrcpy
lstrlen
CreateDirectoryA
GetWindowsDirectoryA
CreateFileA
WriteFile
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameA
SetFilePointer
DeleteFileA
CloseHandle
ReadFile

wininet

HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
RegDeleteValueA
RegEnumValueA

user32

wsprintfA

Exports

Exports

f

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 548B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ