98939d50cbc830ba60aedcd9ad66b7c4 | Triage

Sharing

General

Target

98939d50cbc830ba60aedcd9ad66b7c4
Size

56KB
MD5

98939d50cbc830ba60aedcd9ad66b7c4
SHA1

03c95cd02c212f06ffdcb0cc39f5ab006bb69540
SHA256

c0316592267b14ece7ecd856f73d280200814e5b349de0516229b8eb0af2671c
SHA512

6d9cacfb4b67cb4b5b80912d985a79f968453d8e93dda9b4b94b06b7864bd8bab3a298ed49f62774b7b9fa44b556af252ccb9ee34ba06e8692d18e9a43f461a5
SSDEEP

1536:1fUSMX+Ocm8FkNdRmM9+0yyOQ46r4vbm7EYv9FEa:1LMOxXFkNt+VbxG9FP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98939d50cbc830ba60aedcd9ad66b7c4

Files

98939d50cbc830ba60aedcd9ad66b7c4
.exe windows:4 windows x86 arch:x86

dd5b82e07b6cadce6d221d7edb2d1812

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMemoryResourceNotification
CreateDirectoryExW
CreateMailslotA
FindNextFileA
VirtualProtectEx
BeginUpdateResourceW
WTSGetActiveConsoleSessionId
GetLocaleInfoW
FindFirstChangeNotificationW
GlobalFlags

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE